ShaggyPanther
- First seen
- 2008-01-01 00:00:00
- Origin
- CN
- Primary motivation
- espionage
- Sophistication
- expert
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:13:35
Targeted industries: government-and-public-sector
Targeted regions: country_code:tw country_code:my country_code:id country_code:sy
Context
ShaggyPanther is a threat actor that primarily targets government entities in Taiwan and Malaysia. They have been active since 2008 and utilize hidden encrypted payloads in registry keys. Their activities have been detected in various locations, including Indonesia and Syria.
Reports & references
- Kaspersky — 95394 (report)
- Kaspersky — 94530 (report)
- Kaspersky — 89117 (report)