Home / Threat actors / Elderwood
Elderwood G0066
Also known as: Elderwood Gang, Beijing Group, Sneaky Panda
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
9
Techniques
9
Malware and tools
Elderwood is a suspected Chinese cyber espionage group that was reportedly responsible for the 2009 Google intrusion known as Operation Aurora. The group has targeted defense organizations, supply chain manufacturers, human rights and nongovernmental organizations (NGOs), and IT service providers.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1189 Drive-by CompromiseT1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link Execution
T1203 Exploitation for Client ExecutionT1204.001 Malicious LinkT1204.002 Malicious File Stealth
T1027.002 Software PackingT1027.013 Encrypted/Encoded File Command and Control
T1105 Ingress Tool Transfer © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.