Threat actor

Warp Panda

Tracked by CyberSIXT since 11 Dec 2025 · last activity 16 Oct

CNMalpedia

articles · all time: 3
outlets: 3
CVEs exploited · attributed: 1

Three articles so far, 11 Dec 2025 to 16 Oct.

1 2 3

Thu 11 Dec 2025 · first reportChina’s WARP PANDA APT Deploys BRICKSTORM Backdoor to Hijack VMware vCenter/ESXi and Azure CloudSecurityOnline
Fri 16 OctChina Linked Hackers Exploited BeyondTrust Zero Day to Steal CredentialsThe Hacker News
Fri 16 OctChinese APT exploited BeyondTrust Remote Support flaw to steal filesSecurityWeek

See the full timeline

CVEs exploited

1 CVE an article attributes to Warp Panda

CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability · attributed by Mandiant, Mandiant and Google Threat Intelligence Group (GTIG), 16 OctCVSS9.3CriticalExploited1.2%EPSS12articles

Coverage

3 articles, all timeFull timeline RSS feed

16 OctChinese APT exploited BeyondTrust Remote Support flaw to steal filesSecurityWeek
16 OctChina Linked Hackers Exploited BeyondTrust Zero Day to Steal CredentialsThe Hacker News
11 Dec 2025China’s WARP PANDA APT Deploys BRICKSTORM Backdoor to Hijack VMware vCenter/ESXi and Azure CloudSecurityOnline · first in our coverage

Warp Panda

CVEs exploited

Coverage

On this device

Intel

Settings

Keyboard shortcuts