Skip to content
Auto-CTI
Back to all actors

Warp Panda

Nation-state China Active
Mentions
2
First seen
29 Oct 2026
Last seen
29 Oct 2026

Relevant to you ยท Affects your stack

Technology:
VMware vSphere 8 / ESXi
Threat focus:
espionage / apt

Origin

China

Profile

Warp Panda is a China-linked threat actor that reportedly exploited a low-severity ESXi logging vulnerability as a zero-day. The actor targeted VMware ESX systems to reduce audit trail visibility. The exploitation was intended to decrease the visibility of audit logs and obscure malicious activity.

Affected vendors

VMwareBroadcom

Linked CVEs

Activity (8 weeks)

39
40
41
42
43
44
45
46

Recent activity

ESC

โ€ฆ