Threat Intelligence / Actor / Lotus Blossom / Spring Dragon

Lotus Blossom / Spring Dragon

Nation: China · 1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: Spring Dragon, Billbug, Thrip, Lotus Panda, Bronze Elgin, Raspberry Typhoon, Red Salamander, DRAGONFISH, RADIUM, Lotus Blossom, Bilbug

Tracked threats

Lotus Blossom APT Supply Chain Compromise of Notepad++ Update Infrastructure (CVE-2025-15556) — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence