SPICY PANDA
origin (suspected)
Chinaattribution confidence: medium (50)
source: misp-galaxy1 refs →
SPICY PANDA is a Chinese-origin threat actor with undefined methodology and regional targeting interests.
SPICY PANDA is a threat actor of Chinese origin with its type remaining unspecified. The targeting scope is currently unclear, but based on the geographic origin, it may select victims aligned with regional interests. Since no specific TTPs or tools have been provided, the actor's methodology remains undefined. Defenders should monitor for anomalous behavior using XDR solutions and maintain focus on threat intelligence feeds oriented toward the Asian region.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.