CNChinaconfidence: 50
DAGGER PANDADAGGER PANDA
Also known as: IceFog · Trident · RedFoxtrot · Red Wendigo · PLA Unit 69010 · UAT-7290 · Red Foxtrot · DAGGER PANDA
Origin
CN
Known aliases
8
Target sectors
2
Attribution
State-sponsored
Profile
Operate since at least 2011, from several locations in China, with members in Korea and Japan as well. Possibly linked to Onion Dog. This threat actor targets government institutions, military contractors, maritime and shipbuilding groups, telecommunications operators, and others, primarily in Japan and South Korea.
Aliases· 8
IceFogTridentRedFoxtrotRed WendigoPLA Unit 69010UAT-7290Red FoxtrotDAGGER PANDA
Target sectors· 2
GovernmentMilitary
Known victims· 5
- South Korea
- United States
- Japan
- Germany
- China
References
- https://securelist.com/the-icefog-apt-a-tale-of-cloak-and-three-daggers/57331/
- https://securelist.com/the-icefog-apt-hits-us-targets-with-java-backdoor/58209/
- https://www.cfr.org/interactive/cyber-operations/icefog
- https://d2538mqrb7brka.cloudfront.net/wp-content/uploads/sites/43/2018/03/20133739/icefog.pdf
- https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-report-download.pdf
- https://go.recordedfuture.com/hubfs/reports/cta-2021-0616.pdf
- https://blog.talosintelligence.com/uat-7290/
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.