APT5 is a threat actor attributed to CN, also known as KEYHOLE PANDA, MANGANESE, BRONZE FLEETWOOD. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does APT5 exploit?

APT5 is known to exploit 3 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

APT5

Also known as: KEYHOLE PANDA, MANGANESE, BRONZE FLEETWOOD, TEMP.Bottle, Mulberry Typhoon, Poisoned Flight, Keyhole Panda, UNC2630, TABCTENG, Backdoor-DPD, COVENANT, CYSERVICE, Bottle, Red Horus, Red Naga, Auriga, ATG48, TG-2754

CNCyber Espionage

Exploited CVEs

Overview

UNC2630 is a threat actor believed to be affiliated with the Chinese government. They engage in cyber espionage activities, targeting organizations aligned with Beijing's strategic objectives. UNC2630 demonstrates advanced tradecraft and employs various malware families, including SLOWPULSE and RADIALPULSE, to compromise Pulse Secure VPN appliances. They also utilize modified binaries and scripts to maintain persistence and move laterally within compromised networks.

Exploited Vulnerabilities

CVE ID	Action
CVE-2014-7169	View Details