🇨🇳

Temper Panda

APT Group Information theft and espionage ETDA ✓

Also Known As 5 names

Admin338 G0018 MAGNESIUM Team338 admin@338

Target Countries 2

Countries highlighted in red

Hong Kong United States

Sectors Targeted

Government Financial Media Defense Think Tanks

Details

Origin 🇨🇳 CN

Last Updated 01 Jun 2022

MITRE ATT&CK 22

T1003.001 T1007 T1016 T1036 T1036.005 T1049 T1055.001 T1059 T1059.003 T1069 T1069.001 T1071.001 T1082 T1083 T1087 T1087.001 T1193 T1203 T1204 T1204.002 T1566 T1566.001

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 5 entries

Temper Panda Crowdstrike

admin@338 FireEye

Team338 Kaspersky

Magnesium Microsoft

G0018 MITRE

Observed Target Countries 2

Based on ETDA data — countries highlighted in red

Hong Kong USA

Description

(FireEye) The threat group has previously used newsworthy events as lures to deliver malware. They have largely targeted organizations involved in financial, economic and trade policy, typically using publicly available RATs such as Poison Ivy, as well some non-public backdoors. The group started targeting Hong Kong media companies, probably in response to political and economic challenges in Hong Kong and China. The threat group’s latest activity coincided with the announcement of criminal charges against democracy activists. During the past 12 months, Chinese authorities have faced several challenges, including large-scale protests in Hong Kong in late 2014, the precipitous decline in the stock market in mid-2015, and the massive industrial explosion in Tianjin in August 2015. In Hong Kong, the pro-democracy movement persists, and the government recently denied a professor a post because of his links to a pro-democracy leader.

Tools Used 5

Bozok BUBBLEWRAP LOWBALL Poison Ivy Living off the Land

Reports & References 2

https://www.fireeye.com/blog/threat-research/2013/10/know-your-enemy-tracking-a-rapidly-evolving-apt-actor.html https://www.fireeye.com/blog/threat-research/2015/11/china-based-threat.html

ETDA Profile

Temper Panda, admin@338

Origin

China

First Seen 2014

Motivation

Information theft and espionage

MITRE ATT&CK Groups

https://attack.mitre.org/groups/G0018/

View on ETDA APT Groups ↗