Activity timeline
BlueHammer and RedSun appears in 1 tracked threat between and .
Threat actorChina and IranTracked since 2026-04
BlueHammer and RedSun
Also known as:BlueHammerRedSunVANGUARD PANDAUNC5325APT42PIONEER KITTENMint Sandstorm overlap
As of 2026-05-30, BlueHammer and RedSun is a China and Iran-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning vulnerability. Also known as BlueHammer, RedSun, VANGUARD PANDA, UNC5325.
- Tracked threats
- 11 critical
- First seen
- 2026-04-16
- Last seen
- 2026-04-16
- ATT&CK techniques
- —No mapped techniques yet
- Related CVEs
- 1Referenced by its activity
- Attribution
- China and IranNation or origin