coldbraid

Putter Panda

Putter Panda is a Chinese threat group that has been attributed to Unit 61486 of the 12th Bureau of the PLA’s 3rd General Staff Department (GSD).

ATT&CK ID
G0024
Origin
China
Techniques
4
Tools
4

Also tracked as APT2 · MSUpdater

Techniques

Persistence

Boot or Logon Autostart Execution

Privilege Escalation

Process InjectionBoot or Logon Autostart Execution

Stealth

Obfuscated Files or InformationProcess Injection

Defense Impairment

Disable or Modify Tools

Software

3PARA RAT · 4H RAT · httpclient · pngdowner