WARP PANDA

Linked to China by two sources.

Reports: 1
Last reported: 4 December 2025
Known CVEs: 6
Origin: China

ID: warp-panda
Sources: MISP Malpedia
Merge evidence: 1 alias match

Reports per quarter

2025 Q4: 1 report

Dated reports, 2025 Q4 to 2025 Q4.

Techniques seen in the last two years

T1021.004 1 report
T1036.004 1 report
T1041 1 report
T1070.004 1 report
T1070.006 1 report
T1071.001 1 report
T1071.004 1 report
T1078.001 1 report
T1078.004 1 report
T1083 1 report

Show all 31 techniques Show fewer

T1090 1 report
T1090.003 1 report
T1095 1 report
T1098.001 1 report
T1114.002 1 report
T1190 1 report
T1213 1 report
T1213.002 1 report
T1505.003 1 report
T1530 1 report
T1550.001 1 report
T1560.001 1 report
T1564.006 1 report
T1572 1 report
T1573.002 1 report
T1583.001 1 report
T1583.003 1 report
T1583.007 1 report
T1584.008 1 report
T1588.001 1 report
T1608.003 1 report

Counts come from technique IDs in the actor's report text.

CVEs named in reports

CVE-2021-22005 KEV ransomware
CVE-2023-34048 KEV
CVE-2023-46747 KEV ransomware
CVE-2023-46805 KEV ransomware
CVE-2024-21887 KEV ransomware
CVE-2024-38812 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

4 December 2025

Unveiling WARP PANDA: A New Sophisticated China-Nexus Adversary

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unveiling WARP PANDA: A New Sophisticated China-Nexus Adversary

Newest first. Details opens the report in Explore.