China's 'Evasive Panda' Hijacks Software Updates to Deliver Custom Backdoor
Tags
cmtmf-attack-pattern: Supply Chain Compromise
country: Malaysia China Nigeria Hong Kong India Macao Myanmar Philippines Vietnam Taiwan
attack-pattern: Data Adversary-In-The-Middle - T1638 Adversary-In-The-Middle - T1557 Credentials - T1589.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Social Media - T1593.001 Software - T1592.002 Supply Chain Compromise - T1474 Supply Chain Compromise - T1195 Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID 7f059987-1b08-4b22-a83f-e2e9cbab9e07
Fingerprint c489dd19a031a08a
Analysis status DONE
Considered CTI value 0
Text language
Published April 27, 2023, 7:06 p.m.
Added to db April 27, 2023, 11:15 p.m.
Last updated Oct. 15, 2024, 8:26 p.m.
Headline China's 'Evasive Panda' Hijacks Software Updates to Deliver Custom Backdoor
Title China's 'Evasive Panda' Hijacks Software Updates to Deliver Custom Backdoor
Detected Hints/Tags/Attributes 47/3/4
Source URLs
Redirection Url
Details Source https://www.darkreading.com/attacks-breaches/china-evasive-panda-hijacks-software-updates-custom-backdoor
URL Provider
Details Provider Source level domain
Details darkreading.com www.darkreading.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Autonomous System Number 17 
AS4134
Details Autonomous System Number 1 
AS4135
Details IPv4 1 
13.62.0.0
Details IPv4 4 
111.120.0.0