Panda Pandemonium: New Chinese Cyber Group Liminal Panda Exposed in Telecom Intrusions
CrowdStrike has uncovered a new Chinese cyber espionage group, Liminal Panda, responsible for telecom intrusions previously linked to LightBasin. Active since at least 2020, Liminal Panda targets telecom providers in regions associated with China’s Belt and Road Initiative, aligning with China’s signals intelligence operations.

Hot Take:
Just when you thought you had enough trouble wrestling with one Chinese APT group, out pops another one like an uninvited guest at a cybersecurity party! Move over LightBasin, Liminal Panda is here, and it’s got a panda-sized appetite for telecoms. I guess China’s Belt and Road Initiative now doubles as a roadmap for cyber espionage!
Key Points:
- CrowdStrike has identified a new Chinese cyber espionage group called Liminal Panda.
- Liminal Panda targets telecom providers in countries linked to China’s Belt and Road Initiative.
- The group’s activities are believed to be focused on intelligence gathering, not financial gain.
- Evidence includes the use of domain names and tools commonly associated with Chinese actors.
- CrowdStrike offers mitigation strategies to counter Liminal Panda’s tactics.
Already a member? Log in here