Who is Goblin Panda, Cycldek, Conimes?

Goblin Panda, Cycldek, Conimes is a threat actor attributed to CN, also known as Goblin Panda, Cycldek, Conimes. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does Goblin Panda, Cycldek, Conimes exploit?

Goblin Panda, Cycldek, Conimes is known to exploit 1 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

Goblin Panda, Cycldek, Conimes

Also known as: Goblin Panda, Cycldek, Conimes, 1937CN

CNInformation theft and espionage

Exploited CVEs

Overview

CrowdStrike first observed Goblin Panda activity in September 2013 when indicators of its activity were discovered on the network of a technology company operating in multiple sectors. Malware variants primarily used by this actor include PlugX and HttpTunnel. This actor focuses a significant amount of its targeting activity on entities in Southeast Asia, particularly Vietnam. Heavy activity was observed in the late spring and early summer of 2014 when tensions between China and other Southeast Asian nations were high, due to conflict over territory in the South China Sea. Goblin Panda targets have been primarily observed in the defense, energy, and government sectors.

Exploited Vulnerabilities

CVE ID	Action
CVE-2012-0158