Cyber threats / Threat actors

LOTUS PANDA

CN Suspected sponsor: China · ATT&CK G0030
6
APAC targets
21
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: ATK1, Bilbug, Billbug, BRONZE ELGIN, DRAGONFISH, G0030, Lotus BLossom, RADIUM, Raspberry Typhoon, Red Salamander, Spring Dragon, ST Group, Thrip

Lotus Blossom is a threat group that has targeted government and military organizations in Southeast Asia.

Related profiles: Raspberry Typhoon

Profiles whose description names this actor, that this description names, or that share one of its names. The sources mention them together; they are not necessarily the same group.

ATT&CK techniques · 21
Resource Development
Execution
Persistence
Privilege Escalation
Credential Access
Discovery
Collection
Command and Control
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
  • No Asia-Pacific article names this actor yet.
Targets
Sectors: Government, Government, Administration, Military
Relevance to the EU
EU relevance: Medium
Targets military in Indonesia, where the EU has Peace & Security projects; 3 more such overlaps
34 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
8
Development Cooperation
5
Infrastructure & Transport
4
Energy & Green Transition
4
Research & Innovation
3
Digital & ICT
3
Climate & Environment
3
Education & Skills
2
Threats to the EU →
References
Sources: MISP, MITRE