ATT&CK

Threat actorsMITRE ATT&CK intrusion sets Malware & toolsSoftware families & tooling TechniquesTactics & techniques

ReportsPublished APT reporting SourcesEvery feed behind the archive

Developers

JSON APIFree CORS-enabled endpoints MCP serverModel Context Protocol access Source codeThis project on GitHub

Loading the archive…

Open Threat Intel Archive

Indicators are treated as facts and kept with their source_vendor, source URL, and dates; every feed is credited and redistribution-restricted feeds are flagged, not dropped. ATT&CK content is © MITRE, used under its terms. See NOTICE. The archive reports intelligence; it does not editorialize threat.

Indicators Actors Sources API GitHub

Open Threat Intel Archive

← Threat actors

G0024threat actor

Putter Panda

a.k.a. APT2, MSUpdater

Putter Panda is a Chinese threat group that has been attributed to Unit 61486 of the 12th Bureau of the PLA’s 3rd General Staff Department (GSD).

MITRE ATT&CK ↗

Linked entities · 19

usesS0067pngdowner usesS00663PARA RAT usesS00654H RAT usesT1547.001Registry Run Keys / Startup Folder usesT1685Disable or Modify Tools usesT1055.001Dynamic-link Library Injection usesS0068httpclient usesT1027.013Encrypted/Encoded File mentions by02899a64f19bc3abThe Msupdater Trojan And Ongoing …mentions by63381bd888e2a013Putter Panda mentions bye1870ea3f1cbb55fApt28: A Window Into Russia's Cyb…mentions by72ca919572a646d5Operation Russiandoll: Adobe & Wi…mentions byc3f5fe6095154cc8APT28 Targets Financial Markets:…mentions byc5d59245d6966facBear Hunting Season: Tracking APT…mentions by4ba09d201c632fb2At the Center of the Storm: Russi…mentions by0e496b22224c4146Dissecting the APT28 Mac OS X Pay…mentions byf316a8768a0e6194APT29 Domain Fronting With TOR mentions byb476cefb0a4beecdThreat Group APT28 Slips Office M…mentions byfa0dd38c8e4cb40bAPT28: From Initial Damage to Dom…