VAULT PANDA

Also known as: VAULT PANDA

A likely intelligence gathering-focused, China-nexus threat actor group that has targeted organizations in various sectors, especially financial services, around the world.[CrowdStrike 2025 Global Threat Report]

🌍 Country China

Introduction

A likely intelligence gathering-focused, China-nexus threat actor group that has targeted organizations in various sectors, especially financial services, around the world.[CrowdStrike 2025 Global Threat Report]

Activities and Tactics

Country of Origin: 🇨🇳 China

Notable Campaigns

Information pending cataloguing.

Tactics, Techniques, and Procedures (TTPs)

Information pending cataloguing.

Notable Indicators of Compromise (IOCs)

No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.

Malware and Tools

  • China Chopper:

Attribution and Evidence

Country of Origin: China Additional attribution information pending cataloguing.

References

[1] [CrowdStrike 2025 Global Threat Report