CVE-2024-3400

CVE-2024-3400 is explicitly named as a zero-day exploited in the wild to backdoor Palo Alto Networks firewalls, with patch released in April 2024 coinciding with exploitation disclosure. BleepingComputer article title directly states 'zero-day exploited to backdoor firewalls,' and follow-up reporting confirms over 2,000 firewalls were compromised using this vulnerability, establishing active exploitation prior to or concurrent with patch availability.

Threat Actors 66

Lazarus Group

apt_group Information theft and espionage 🇰🇵 KP

APT 41

apt_group Information theft and espionage 🇨🇳 CN

Turla Group

apt_group Information theft and espionage Russian Federation

Void Arachne

apt_group Information theft and espionage 🇨🇳 CN

APT 29

apt_group Information theft and espionage 🇷🇺 RU

DarkHotel

apt_group Information theft and espionage 🇰🇷 KR

Mustang Panda

apt_group Information theft and espionage 🇨🇳 CN

Cobalt

apt_group Financial crime 🇷🇺 RU

FIN7

apt_group Financial crime 🇷🇺 RU

Kimsuky

apt_group Information theft and espionage 🇰🇷 KR

CHRYSENE

apt_group Information theft and espionage 🇮🇷 IR

Vicious Panda

apt_group Information theft and espionage 🇨🇳 CN

TeamPcp

apt_group

Harvester

apt_group Information theft and espionage Unknown

Hacking Team

apt_group 🇮🇹 IT

GhostEmperor

apt_group Information theft and espionage 🇨🇳 CN

NoName057

apt_group 🇷🇺 RU

SCATTERED SPIDER

apt_group Financial crime 🇺🇸 US

Sea Turtle

apt_group Information theft and espionage 🇹🇷 TR

Tick

apt_group Information theft and espionage 🇨🇳 CN

APT3

apt_group Information theft and espionage 🇨🇳 CN

ELECTRUM

apt_group Information theft and espionage 🇷🇺 RU

Infy

apt_group Information theft and espionage 🇮🇷 IR

Just Evil

apt_group 🇷🇺 RU

Volt Typhoon

apt_group Information theft and espionage 🇨🇳 CN

Group 27

apt_group Information theft and espionage 🇨🇳 CN

BRONZE HIGHLAND

apt_group Information theft and espionage 🇨🇳 CN

ArcaneDoor

apt_group 🇨🇳 CN

Silence group

apt_group Financial crime 🇷🇺 RU

Storm-2077

apt_group Information theft and espionage 🇨🇳 CN

Cuboid Sandstorm

apt_group 🇮🇷 IR

Tortoiseshell

apt_group Information theft and espionage 🇮🇷 IR

FamousSparrow

apt_group Information theft and espionage 🇨🇳 CN

RomCom

apt_group Financial gain 🇷🇺 RU

UNC5174

apt_group 🇨🇳 CN

Earth Estries

apt_group Information theft and espionage 🇨🇳 CN

HAFNIUM

apt_group Information theft and espionage 🇨🇳 CN

BrazenBamboo

apt_group 🇨🇳 CN

Fox Kitten

apt_group Information theft and espionage 🇮🇷 IR

Gray Sandstorm

apt_group 🇮🇷 IR

APT 22

apt_group Information theft and espionage 🇨🇳 CN

Actor240524

apt_group

Flax Typhoon

apt_group Information theft and espionage 🇨🇳 CN

Rocke

apt_group 🇨🇳 CN

Void Rabisu

apt_group Financial gain 🇷🇺 RU

UNC4841

apt_group Information theft and espionage 🇨🇳 CN

UTA0218

apt_group 🇨🇳 CN

APT 6

apt_group Information theft and espionage 🇨🇳 CN

Water Bakunawa

apt_group 🇷🇺 RU

Bitwise Spider

apt_group Financial gain 🇷🇺 RU

Red October

apt_group 🇷🇺 RU

Circles

apt_group Global

Operation Red Signature

apt_group Information theft and espionage 🇨🇳 CN

Operation Digital Eye

apt_group Information theft and espionage 🇨🇳 CN

PassCV

apt_group Information theft and espionage 🇨🇳 CN

Shadow Network

apt_group Information theft and espionage 🇨🇳 CN

Operation Olympic Games

apt_group Sabotage and destruction 🇺🇸 US

Mana Team

apt_group 🇨🇳 CN

Iron Group

apt_group Information theft and espionage 🇨🇳 CN

puNK-003

apt_group 🇰🇵 KP

Operation Shadow Force

apt_group 🇨🇳 CN

TA4903

apt_group 🇺🇸 US

APT 5

apt_group Information theft and espionage 🇨🇳 CN

Beijing Group

apt_group Information theft and espionage 🇨🇳 CN

Operation Black Atlas

apt_group Financial crime

Dark Partners

apt_group

Triage Info

Decided atMar 05, 2026