Threat actor
Evasive Panda
China · espionage
Tracked by CyberSIXT since 24 Dec 2025
- Articles · all time
- 4
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
4 articles from 4 outlets since 24 Dec 2025; the latest 301 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 29 Dec 2025 · 09:00 UTC | Security Affairs | Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor |
| Fri 26 Dec 2025 · 15:40 UTC | The Hacker News | China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware |
| Thu 25 Dec 2025 · 02:20 UTC | SecurityOnline | Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree |
| Wed 24 Dec 2025 · 07:05 UTC | Securelist | Evasive Panda APT poisons DNS requests to deliver MgBot |
Who reported 4 outlets
- Securelist1
- SecurityOnline1
- The Hacker News1
- Security Affairs1
Names and sources
- Evasive Panda
- Named by CyberSIXT coverage
- BRONZE HIGHLAND
- Named by Malpedia · evasive_panda
- Evasive Panda
- Named by Malpedia · evasive_panda
- BRONZE HIGHLAND
- Named by MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d
- Evasive Panda
- Named by MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d
- 171d0590-be92-443f-addb-af5dc2a8034d
- Named by CyberSIXT coverage
Attributed facts
- motivation
- espionage (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- origin
- China (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- sector
- Government (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- sector
- Individuals (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- sector
- Universities (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- sponsor
- China (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- Target country
- Hong Kong (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- Target country
- India (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- Target country
- Malaysia (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
- Target country
- Taiwan (MISP Galaxy · 171d0590-be92-443f-addb-af5dc2a8034d)
Malware and tools
- Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoorSecurity Affairs
- China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot MalwareThe Hacker News
- Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year SpreeSecurityOnline
- Evasive Panda APT poisons DNS requests to deliver MgBotSecurelist · first in our coverage