Threat Intelligence / Actor / Mustang Panda / UNC6384

Mustang Panda / UNC6384

Nation: China · 1 tracked threat(s) · Categories: APT

Also known as: Mustang Panda, UNC6384, TEMP.Hex, Earth Preta, Bronze President, TA416, RedDelta, Camaro Dragon, STATELY TAURUS, FIREANT, HIVE0154, TWILL TYPHOON

Tracked threats

PlugX Meeting Invitation Campaign — China-Nexus MSBuild LOLBIN + GDATA DLL Sideloading, RC4 Encrypted C2, STATICPLUGIN Variant (Mustang Panda / UNC6384) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence