Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

Mustang Panda

1 incidentes 1 paises 0 sectores threat-actor CN Ultimo: 2026-05-25

Aliases: TA416, RedDelta, BRONZE PRESIDENT, STATELY TAURUS, FIREANT, CAMARO DRAGON, EARTH PRETA, HIVE0154, TWILL TYPHOON, TANTALUM, LUMINOUS MOTH, UNC6384, TEMP.Hex, Red Lich, ClumsyToad, Stone Panda, espionaje estatal, según datos verificados de fuentes OSINT

Ver en IntelTracker → APTTrail →

Mustang Panda is a China-based cyber espionage threat actor that has been conducting operations since at least 2012. Mustang Panda has been known to use tailored phishing lures and decoy documents to deliver malicious payloads. Mustang Panda has targeted government, diplomatic, and non-governmental organizations, including think tanks, religious institutions, and research entities, across the United States, Europe, and Asia, with notable activity in Russia, Mongolia, Myanmar, Pakistan, and Vietnam.

Aliases del actor

TA416 RedDelta BRONZE PRESIDENT STATELY TAURUS FIREANT CAMARO DRAGON EARTH PRETA HIVE0154 TWILL TYPHOON TANTALUM LUMINOUS MOTH UNC6384 TEMP.Hex Red Lich ClumsyToad Stone Panda espionaje estatal según datos verificados de fuentes OSINT South East Asia https

Actores similares

mustang-pandaactor · 1 predator-pandaactor · 1 stone-pandaactor · 1 temper-pandaactor · 1 Stone Pandaapt · 0 Temper Pandaapt · 0 Predator Pandaapt · 0 anchor-pandaactor · 1 aquatic-pandaactor · 1 big-pandaactor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
DLS / leak site	unknown	duckduckgo.com	Mustang Panda (China)
Web	unknown	attack.mitre.org	OSINT

Motivacion

Information theft and espionage

Malware asociado

sorgu, tofsee, PlugX, ShadowPad, PoisonIvy, Mimikatz

Tecnicas MITRE

T1036.005, T1587.001 - Malware, T1608.001 - Upload Malware, T1595 - Active Scanning, T1587.001, T1204.002

CVEs relacionadas

CVE-2025-9491, CVE-2025-6543, CVE-2025-5777, CVE-2025-55182, CVE-2025-52579, CVE-2025-31324

Victimas

TTPs unicas

Info robada historica

N/D

Rescates reclamados

N/D

Pagos detectados

N/D

Paises afectados

China (1)

Sectores objetivo (OSINT)

HospitalsPublic AdministrationEducational ServicesSpace & DefensePharmaceutical and Medicine ManufacturingPlastics Product ManufacturingLegal ServicesPromoters of Performing Arts, Sports, and Similar EventsReligious OrganizationsCivic and Social Organizations