Threat actor
ShadyPanda
Tracked by CyberSIXT since 1 Dec 2025
- Articles · all time
- 3
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
4 articles from 2 outlets since 1 Dec 2025; the latest 298 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 31 Dec 2025 · 16:35 UTC | The Hacker News | DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide |
| Mon 15 Dec 2025 · 13:10 UTC | The Hacker News | A Browser Extension Risk Guide After the ShadyPanda Campaign |
| Wed 3 Dec 2025 · 22:55 UTC | Dark Reading | 'ShadyPanda' Hackers Weaponize Millions of Browsers |
| Mon 1 Dec 2025 · 18:30 UTC | The Hacker News | ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware |
Who reported 2 outlets
- The Hacker News3
- Dark Reading1
Names and sources
- ShadyPanda
- Named by CyberSIXT coverage
- ShadyPanda
- Named by Malpedia · shadypanda
- ShadyPanda
- Named by MISP Galaxy · c1e76272-22c5-4f2a-96e9-8d2384a994ad
- c1e76272-22c5-4f2a-96e9-8d2384a994ad
- Named by CyberSIXT coverage
- DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users WorldwideThe Hacker News
- A Browser Extension Risk Guide After the ShadyPanda CampaignThe Hacker News
- 'ShadyPanda' Hackers Weaponize Millions of BrowsersDark Reading
- ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into SpywareThe Hacker News · first in our coverage