MITRE ATT&CKgroup

G0009 Deep Panda

Published 2017-05-31 Modified 2026-07-31 Official page ↗
Domain
enterprise
Aliases
Shell Crew, WebMasters, KungFu Kittens, PinkPanther, Black Vine
Version
1.2
Created
2017-05-31

Description

Deep Panda is a suspected Chinese threat group known to target many industries, including government, defense, financial, and telecommunications. The intrusion into healthcare company Anthem has been attributed to Deep Panda. This group is also known as Shell Crew, WebMasters, KungFu Kittens, and PinkPanther. Deep Panda also appears to be known as Black Vine based on the attribution of both group names to the Anthem intrusion. Some analysts track Deep Panda and APT19 as the same group, but it is unclear from open source information if the groups are the same.

Related

Uses · MITRE ATT&CK (17)

  • T1027.005 Indicator Removal from Tools sub-technique
  • T1564.003 Hidden Window sub-technique
  • T1059.001 PowerShell sub-technique
  • T1021.002 SMB/Windows Admin Shares sub-technique
  • T1546.008 Accessibility Features sub-technique
  • T1218.010 Regsvr32 sub-technique
  • T1505.003 Web Shell sub-technique
  • S0021 Derusbi software (malware)
  • S0039 Net software (tool)
  • S0057 Tasklist software (tool)
  • S0074 Sakula software (malware)
  • S0080 Mivast software (malware)
  • S0097 Ping software (tool)
  • S0142 StreamEx software (malware)
  • T1018 Remote System Discovery technique
  • T1047 Windows Management Instrumentation technique
  • T1057 Process Discovery technique

References