GOBLIN PANDA is a China-linked APT group known for cyber espionage targeting private sector entities in Southeast Asia.
GOBLIN PANDA is an elite nation-state cyber espionage group originating from China, functioning as an advanced persistent threat (APT). It specifically targets private sector entities across Southeast Asia, including Malaysia, India, Indonesia, Japan, the Philippines, South Korea, and Vietnam. The group is tracked under the aliases 'Conimes' and 'Cycldek', though specific TTPs and tools are not detailed in the provided data. Defenders should prioritize monitoring for intelligence-gathering activities focused on the Southeast Asian region and scrutinize internet-facing critical systems for indicators linked to this group.
Goblin Panda is one of a handful of elite Chinese advanced persistent threat (APT) groups. Most Chinese APTs target the United States and NATO, but Goblin Panda focuses primarily on Southeast Asia.
GOBLIN PANDA primarily targets the Southeast Asian region, including Malaysia, India, Indonesia, Japan, the Philippines, South Korea, and Vietnam.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.