Operator Panda

Since at least November 2024, China-nexus targeted intrusion adversary OPERATOR PANDA has conducted operations against the telecom and professional services sectors. OPERATOR PANDA relies heavily on exploiting internet-facing appliances—such as Cisco switches—for initial access.  OPERATOR PANDA’s activity targeting Cisco edge devices at U.S.-based entities broadly aligns with that of Salt Typhoon,...