CVE Intelligence
Home / Threat actors / Deep Panda

Deep Panda G0009

🔔 Create alert

Also known as: Shell Crew, WebMasters, KungFu Kittens, PinkPanther, Black Vine

Updated at source on Jul 31, 2026 · View on MITRE ATT&CK

0
associated CVEs
11
Techniques
7
Malware and tools

Deep Panda is a suspected Chinese threat group known to target many industries, including government, defense, financial, and telecommunications. The intrusion into healthcare company Anthem has been attributed to Deep Panda. This group is also known as Shell Crew, WebMasters, KungFu Kittens, and PinkPanther. Deep Panda also appears to be known as Black Vine based on the attribution of both group names to the Anthem intrusion. Some analysts track Deep Panda and APT19 as the same group, but it is unclear from open source information if the groups are the same.

Exploited vulnerabilities

CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.

ATT&CK does not cite CVEs for this group.

Techniques by tactic

Execution
T1047 Windows Management InstrumentationT1059.001 PowerShell
Persistence
T1505.003 Web ShellT1546.008 Accessibility Features
Privilege Escalation
T1546.008 Accessibility Features
Stealth
T1027.005 Indicator Removal from ToolsT1218.010 Regsvr32T1564.003 Hidden Window
Discovery
T1018 Remote System DiscoveryT1057 Process Discovery
Lateral Movement
T1021.002 SMB/Windows Admin Shares

Malware and tools

© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.