Mustang Panda
High ConfidenceMedium ThreatBronze President • RedDelta • TA416 • Earth Preta • Stately Taurus • TEMP.Hex
Mustang Panda, also known as Bronze President or RedDelta, is a Chinese APT group that has been active since at least 2017. The group primarily targets government entities, non-profit organizations, and religious institutions across Southeast Asia, Europe, and the United States. Mustang Panda is known for their use of PlugX malware variants and sophisticated spear-phishing campaigns often leveraging geopolitical themes. Their operations align with Chinese strategic interests, particularly regarding territorial disputes, foreign policy, and minority groups including Tibetan and Uyghur communities.
Mustang Panda, also known as Bronze President or RedDelta, is a Chinese APT group that has been active since at least 2017. The group primarily targets government entities, non-profit organizations, and religious institutions across Southeast Asia, Europe, and the United States. Mustang Panda is known for their use of PlugX malware variants and sophisticated spear-phishing campaigns often leveraging geopolitical themes. Their operations align with Chinese strategic interests, particularly regarding territorial disputes, foreign policy, and minority groups including Tibetan and Uyghur communities.
Target Sectors
Target Regions
Attributed to PLA/MSS (China). Attribution confidence: High.
Future Outlook
Mustang Panda is expected to continue operations targeting Government sectors.
First observed activity of Mustang Panda
Continued active operations