Flax Typhoon, also known by the aliases Ethereal Panda and Storm-0919, is a state-sponsored cyber espionage group assessed with high confidence to be of Chinese origin. The group has been active since mid-2021, focusing on intelligence gathering and maintaining long-term access within targeted networks. Their primary motivation is cyber espionage, aiming to establish and sustain persistent access to facilitate intelligence collection rather than disruptive or financially motivated attacks. What uniquely sets Flax Typhoon apart is their heavy reliance on living-off-the-land (LOLBins) techniques and legitimate software, along with minimal use of custom malware, which enables them to maintain stealth and persistence within compromised environments for extended periods. The group is also known as Red Juliet and UNC5007 by other security vendors.

Aliases del actor

Ethereal PandaStorm-0919APT FLAXTYPHOON

Actores similares

apt-flaxtyphoonactor · 1apt-sharppandaactor · 1apt-twistedpandaactor · 1Mustang Pandaapt · 1APT27 (Emissary Panda)actor · 1Putter Pandaapt · 1ethereal-pandaactor · 1Stone Pandaapt · 0Vicious Pandaapt · 0Pitty Pandaapt · 0