Threat actor · all actors

Putter PandaG0024 state

aka Putter Panda, APT2, MSUpdater, PLA Unit 61486, 4HCrew, SULPHUR, SearchFire, TG-6952, G0024

Last updated: 2026-07-03

0attributed CVEs

7ATT&CK techniques

0.0IDF score (tooling uniqueness)

0exclusive CVEs

—years active

About this actor

[Putter Panda](https://attack.mitre.org/groups/G0024) is a Chinese threat group that has been attributed to Unit 61486 of the 12th Bureau of the PLA’s 3rd General Staff Department (GSD). (Citation: CrowdStrike Putter Panda)

Source: MITRE ATT&CK

Activity timeline

No activity events recorded.

Profile

CVE	Risk	CVSS	EPSS	Published	Products
No attributed CVEs.

Mitigating controls (NIST 800-53)

Control	Techniques covered	Coverage
`SI-3`	5 / 7	71%
`SI-4`	4 / 7	57%
`AC-3`	3 / 7	43%
`AC-6`	3 / 7	43%
`CM-6`	3 / 7	43%
`SI-2`	3 / 7	43%
`AC-2`	2 / 7	29%
`AC-5`	2 / 7	29%
`CM-2`	2 / 7	29%
`CM-5`	2 / 7	29%
`CM-7`	2 / 7	29%
`IA-2`	2 / 7	29%
`SC-18`	2 / 7	29%
`SC-7`	2 / 7	29%
`SI-7`	2 / 7	29%

Co-occurring actors

None.

Similar actors

Similar TTPs

APT18 0.19
Dark Caracal 0.18
Malteiro 0.18
Group5 0.17
Gorgon Group 0.15