LOTUS PANDA
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
Lotus Blossom is a threat group that has targeted government and military organizations in Southeast Asia.
Source-reported aliases: Spring Dragon, ST Group, DRAGONFISH, BRONZE ELGIN, ATK1, G0030, Red Salamander, Lotus BLossom, Billbug, Lotus Blossom. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
Japan · 
Philippines · 
Hong Kong · 
Indonesia · 
Taiwan · 
Vietnam
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://securelist.com/blog/research/70726/the-spring-dragon-apt/
https://securelist.com/spring-dragon-updated-activity/79067/
https://www.cfr.org/interactive/cyber-operations/lotus-blossom
https://unit42.paloaltonetworks.com/operation-lotus-blossom/
https://unit42.paloaltonetworks.com/attack-on-french-diplomat-linked-to-operation-lotus-blossom/
https://attack.mitre.org/groups/G0030/
https://www.secureworks.com/research/threat-profiles/bronze-elgin
https://fortiguard.fortinet.com/threat-signal-report/4879