- Category
- State · Attributed to a state or working for one.
- Origin
- China(medium confidence)
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1228 · vault-panda
ChinaWhat it is
A likely intelligence gathering-focused, China-nexus threat actor group that has targeted organizations in various sectors, especially financial services, around the world.<sup>[CrowdStrike 2025 Global Threat Report]</sup>
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
- ThreatActor.info (Malpedia et al.)China
Tools
The tools and malware families the sources tie to it.
- China Chopper