Loading threat actor…
OVERCAST PANDA is a China-linked cyberespionage threat actor known to target senior personnel in the legal sector. In September and October 2025, it deployed FlowCloud malware on systems assigned to director- and executive-level employees at a United Kingdom law firm. Its targeting of personnel with access to sensitive information and decision-making authority aligns with Chinese intelligence collection priorities.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 malware family Mallory has associated with this actor across public reporting.
2 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.
No news coverage yet. Advisories and community discussion only.