Who is NetTraveler, APT 21, Hammer Panda?

NetTraveler, APT 21, Hammer Panda is a threat actor attributed to CN, also known as NetTraveler, APT 21, Hammer Panda. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does NetTraveler, APT 21, Hammer Panda exploit?

Specific CVE exploitation data for NetTraveler, APT 21, Hammer Panda is being tracked. Check the Strobes VI threat actor profile for updates.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

NetTraveler, APT 21, Hammer Panda

Also known as: NetTraveler, APT 21, Hammer Panda, TEMP.Zhenbao, HAMMER PANDA

CNInformation theft and espionage

Exploited CVEs

Overview

Over the last few years, we have been monitoring a cyber-espionage campaign that has successfully compromised more than 350 high profile victims in 40 countries. The main tool used by the threat actors during these attacks is NetTraveler, a malicious program used for covert computer surveillance. The name NetTraveler comes from an internal string which is present in early versions of the malware: NetTraveler Is Running! This malware is used by APT actors for basic surveillance of their victims. Earliest known samples have a timestamp of 2005, although references exist indicating activity as early as 2004. The largest number of samples we observed were created between 2010 and 2013. The later group RedAlpha has infrastructure overlap with NetTraveler.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database