APT31. Attacks of the Striking Panda

APT31. Striking Panda Attacks 🐼

From 2024 to 2025, Russian IT companies operating as contractors and solution integrators for government agencies faced a series of well-crafted and skillfully executed targeted attacks, allowing the attackers to remain undetected for extended periods.

During the incident investigation over this period, we were able to link some of the attacks to the APT31 group, which is primarily focused on industrial espionage and theft of intellectual property. The group disguises its tools as legitimate software. Another characteristic feature of its behavior is the use of legitimate services to establish a two-way communication channel with the malware.

🥷 You can read about the group’s tactics, techniques, and unique tools in our blog.

#TI #APT #DFIR #malware