Putter Panda

Origin🇨🇳 China

Techniques (MITRE ATT&CK)4

SourceMITRE ATT&CK

State sponsor: ChinaAttribution confidence: 50%Target categories: Private sector, Government

Targeted regions: U.S. satellite and aerospace sector

Also known as:4HCrewAPT2G0024MSUpdaterPLA Unit 61486SULPHURSearchFireTG-6952

Vexday analysis

Putter Panda é um grupo de ameaça persistente avançada (APT) de origem chinesa, atribuído à Unidade 61486 do 12º Bureau do Departamento Geral de Estado-Maior (GSD) do Exército de Libertação Popular. Também rastreado sob os aliases APT2 e MSUpdater, o grupo possui identificador G0024 no MITRE ATT&CK, com 4 técnicas documentadas associadas às suas atividades.

Techniques (MITRE ATT&CK) 4

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Persistence

Registry Run Keys / Startup Folder

defense-impairment

Disable or Modify Tools

stealth

Encrypted/Encoded File Dynamic-link Library Injection

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

References

Putter Panda uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →