threat actor · China
APT4
On record in MISP Galaxy
The strips, in order: the CVEs it is reported to exploit by weakness class and by vendor, the techniques ATT&CK says it uses by tactic, its malware and tools, then who it targets. Each square is one record.
APT4 is a threat actor name that is listed in the MISP Galaxy threat-actor cluster. It is also known as PLA Navy, MAVERICK PANDA, BRONZE EDISON, SODIUM and 1 other name. MISP Galaxy gives its country as China and names China as its suspected state sponsor. MISP Galaxy records its activity as espionage. MISP Galaxy cites six reference sources for it (alienvault.com, blog.trendmicro.com and sans.org and others). No CyberSIXT article names it, and MISP Galaxy carries no description of it.
Source: CyberSIXT record. Assembled from the fields CyberSIXT holds on this actor; no source description is on record.
- Also known as
- PLA Navy, MAVERICK PANDA, BRONZE EDISON, SODIUM, Salmon Typhoon
- Origin
- China
- Suspected sponsor
- China
- Motivation
- Espionage
- On record in
- MISP Galaxy
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.