Deep Panda
- ID
- G0009
- Associated names
- Shell Crew, WebMasters, KungFu Kittens, PinkPanther, Black Vine
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Deep Panda is a suspected Chinese threat group known to target many industries, including government, defense, financial, and telecommunications. [1] The intrusion into healthcare company Anthem has been attributed to Deep Panda. [2] This group is also known as Shell Crew, WebMasters, KungFu Kittens, and PinkPanther. [3] Deep Panda also appears to be known as Black Vine based on the attribution of both group names to the Anthem intrusion. [4] Some analysts track Deep Panda and APT19 as the same group, but it is unclear from open source information if the groups are the same. [5]
Techniques used (10)
- T1018 Remote System Discovery
- T1021.002 SMB/Windows Admin Shares
- T1027.005 Indicator Removal from Tools
- T1047 Windows Management Instrumentation
- T1057 Process Discovery
- T1059.001 PowerShell
- T1218.010 Regsvr32
- T1505.003 Web Shell
- T1546.008 Accessibility Features
- T1564.003 Hidden Window