Deep PandaG0009 state

About this actor

[Deep Panda](https://attack.mitre.org/groups/G0009) is a suspected Chinese threat group known to target many industries, including government, defense, financial, and telecommunications. (Citation: Alperovitch 2014) The intrusion into healthcare company Anthem has been attributed to [Deep Panda](https://attack.mitre.org/groups/G0009). (Citation: ThreatConnect Anthem) This group is also known as Shell Crew, WebMasters, KungFu Kittens, and PinkPanther. (Citation: RSA Shell Crew) [Deep Panda](https://attack.mitre.org/groups/G0009) also appears to be known as Black Vine based on the attribution of both group names to the Anthem intrusion. (Citation: Symantec Black Vine) Some analysts track [Deep Panda](https://attack.mitre.org/groups/G0009) and [APT19](https://attack.mitre.org/groups/G0073) as the same group, but it is unclear from open source information if the groups are the same. (Citation: ICIT China's Espionage Jul 2016)

Source: MITRE ATT&CK

Names & naming systems

Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.

How we know this

See how actor data is built for the full pipeline.

Activity timeline

• 2024 — 1 KEV added
• 2022 — 2 CVE published, 4 KEV added
• 2021 — 2 CVE published, 28 KEV added
• 2020 — 14 CVE published
• 2019 — 11 CVE published
• 2018 — 2 CVE published
• 2017 — 2 CVE published
• 2015 — 1 CVE published
• 2012 — 1 CVE published

Profile

Mitigating controls (NIST 800-53)

Co-occurring actors

• AnonOps 35 shared CVEs
• COMP-MICROSOFT-SALESFORCE 35 shared CVEs
• Leviathan 33 shared CVEs
• menuPass 32 shared CVEs
• APT3 32 shared CVEs
• APT19 32 shared CVEs
• APT41 32 shared CVEs
• Winnti Group 32 shared CVEs
• APT1 32 shared CVEs
• l group 11 shared CVEs

Similar actors