APT14
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
PLA Navy Anchor Panda is an adversary that CrowdStrike has tracked extensively over the last year targeting both civilian and military maritime operations in the green/brown water regions primarily in the area of operations of the South Sea Fleet of the PLA Navy. In addition to maritime operations in this region, Anchor Panda also heavily targeted western companies in the US, Germany, Sweden, the UK, and Australia, and other countries involved in maritime satellite systems, aerospace companies, and defense contractors. Not surprisingly, embassies and diplomatic missions in the region, foreign intelligence services, and foreign governments with space programs were also targeted.
Source-reported aliases: ANCHOR PANDA, QAZTeam, ALUMINUM. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): United States of America ·
United Kingdom ·
Germany ·
Australia ·
Sweden
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://www.cfr.org/interactive/cyber-operations/anchor-panda
https://www.mandiant.com/resources/insights/apt-groups