Putter Panda were the subject of an extensive report by CrowdStrike, which stated: 'The CrowdStrike Intelligence team has been tracking this particular unit since2012, under the codename PUTTER PANDA, and has documented activity dating back to 2007. The report identifies Chen Ping, aka cpyy, and the primary location of Unit 61486.'
The same group is tracked under different names by different vendors.
| Vendor | Name |
|---|---|
| OSINT | PLA Unit 61486 |
| OSINT | PUTTER PANDA |
| OSINT | MSUpdater |
| OSINT | 4HCrew |
| OSINT | SULPHUR |
| OSINT | SearchFire |
| OSINT | TG-6952 |
| OSINT | G0024 |
Sectors: Private sector, Government
Victim countries: U.S. satellite and aerospace sector
No IOCs extracted yet from reports naming this actor.
Every report in the Global Intel Library that names APT2, newest first. Open any report to see the full analysis with provenance.
No reports in the Lore library name this actor yet.
Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to APT2. Each row shows why it was linked and where it came from.
No feed indicators linked to this actor yet. Feeds are checked every hour.
Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.