GOBLIN PANDA
Aliases: Conimes, Cycldek
- First seen
- 2013-01-01 00:00:00
- Origin
- CN
- Primary motivation
- espionage
- Sophistication
- advanced
- Resource level
- government
- Actor type
- nation-state
- Last IoC activity
- 2026-06-15 10:45:04
- Profile updated
- 2026-07-07 11:49:16
Targeted industries: defense-and-aerospace government-and-public-sector
Targeted regions: country_code:vn country_code:kh
Context
Goblin Panda is one of a handful of elite Chinese advanced persistent threat (APT) groups. Most Chinese APTs target the United States and NATO, but Goblin Panda focuses primarily on Southeast Asia.
Reports & references
- CrowdStrike — Report2020Crowdstrikeglobalthreatreport (report)
- cyberthreat.thalesgroup.com — Thales%20Threat%20Handbook%202022%20Light%20Version 1 (report)
- CrowdStrike — Meet Crowdstrikes Adversary Of The Month For August Goblin Panda (report)
- Kaspersky — 97157 (report)
- fortinet.com — Cta Security Playbook Goblin Panda (report)