Lotus Blossom is a threat group that has targeted government and military organizations in Southeast Asia.
The same group is tracked under different names by different vendors.
| Vendor | Name |
|---|---|
| OSINT | Spring Dragon |
| OSINT | ST Group |
| OSINT | DRAGONFISH |
| OSINT | BRONZE ELGIN |
| OSINT | ATK1 |
| OSINT | G0030 |
| OSINT | Red Salamander |
| OSINT | Lotus BLossom |
| OSINT | Billbug |
| OSINT | RADIUM |
| OSINT | Raspberry Typhoon |
| OSINT | Bilbug |
| OSINT | Thrip |
Sectors: Military, Government, Military, Government, Administration
Victim countries: Japan, Philippines, Hong Kong, Indonesia, Taiwan, Vietnam
No IOCs extracted yet from reports naming this actor.
Every report in the Global Intel Library that names LOTUS PANDA, newest first. Open any report to see the full analysis with provenance.
No reports in the Lore library name this actor yet.
Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to LOTUS PANDA. Each row shows why it was linked and where it came from.
| Type | Indicator | Linked by | Seen | Source |
|---|---|---|---|---|
| FileHash-MD5 | 754a201f853985b0c1c5a96d4637966d | OTX pulse "THE LOTUS PANDA IS AWAKE, AGAIN. ANALYSIS OF ITS LAST STRIKE. - Cluster25" | 2022-05-02 | AlienVault OTX |
| FileHash-SHA1 | 12b6c8ab12dc04106e9ac74f790a1145bdb3d844 | OTX pulse "THE LOTUS PANDA IS AWAKE, AGAIN. ANALYSIS OF ITS LAST STRIKE. - Cluster25" | 2022-05-02 | AlienVault OTX |
| FileHash-SHA256 | 05936ed2436f57237e7773d3b6095e8df46821a62da49985c98be34136594ebd | OTX pulse "THE LOTUS PANDA IS AWAKE, AGAIN. ANALYSIS OF ITS LAST STRIKE. - Cluster25" | 2022-05-02 | AlienVault OTX |
| FileHash-SHA256 | 8b831ee82975d43456ee861115272d3923e17f07a702eb057feeed8ce76ff4ca | OTX pulse "THE LOTUS PANDA IS AWAKE, AGAIN. ANALYSIS OF ITS LAST STRIKE. - Cluster25" | 2022-05-02 | AlienVault OTX |
| FileHash-SHA256 | ee50160fdd7cacb7d250f83c48efa55ae0479e47a1eece9c08fe387453b9492a | OTX pulse "THE LOTUS PANDA IS AWAKE, AGAIN. ANALYSIS OF ITS LAST STRIKE. - Cluster25" | 2022-05-02 | AlienVault OTX |
| FileHash-SHA256 | eeb5dc51e3828ffbefc290dc1a973c5afc89ba7ff43ab337d5a3b3dc6ca4216f | OTX pulse "THE LOTUS PANDA IS AWAKE, AGAIN. ANALYSIS OF ITS LAST STRIKE. - Cluster25" | 2022-05-02 | AlienVault OTX |
| URL | https://175.27.164.228:57784/NYMLEDfq/IOH9E0Nq2YMEVQVXZgqYUAOI5wWcN5LMe | OTX pulse "THE LOTUS PANDA IS AWAKE, AGAIN. ANALYSIS OF ITS LAST STRIKE. - Cluster25" | 2022-05-02 | AlienVault OTX |
Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.