CNChinaconfidence: 50

APT14APT14

Also known as: ANCHOR PANDA · QAZTeam · ALUMINUM · APT14

Origin
CN
Known aliases
4
Target sectors
2
Attribution
State-sponsored

Profile

PLA Navy Anchor Panda is an adversary that CrowdStrike has tracked extensively over the last year targeting both civilian and military maritime operations in the green/brown water regions primarily in the area of operations of the South Sea Fleet of the PLA Navy. In addition to maritime operations in this region, Anchor Panda also heavily targeted western companies in the US, Germany, Sweden, the UK, and Australia, and other countries involved in maritime satellite systems, aerospace companies, and defense contractors. Not surprisingly, embassies and diplomatic missions in the region, foreign intelligence services, and foreign governments with space programs were also targeted.

Aliases· 4

ANCHOR PANDAQAZTeamALUMINUMAPT14

Target sectors· 2

GovernmentMilitary

Known victims· 5

  • United States
  • United Kingdom
  • Germany
  • Australia
  • Sweden

References

  1. http://www.crowdstrike.com/blog/whois-anchor-panda/
  2. https://www.cfr.org/interactive/cyber-operations/anchor-panda
  3. https://www.mandiant.com/resources/insights/apt-groups

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
APT4
Actor
APT2
Actor
APT15
Actor
APT19
Actor
APT12
Actor
APT21
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.