In an increasingly digital world, we&rsquo;re switching more and more of our daily lives over to the Internet. While this brave new world is exciting and convenient, it&rsquo;s not without its problems.&nbsp;
The issue of unsafe passwords has been around for a while. But have you ever thought about where and how to store them?
Most of us have several passwords, and we&rsquo;re encouraged to never duplicate them. Some people simply write them all down on a piece of paper &mdash; which is fraught with danger. But others store their passwords electronically.
As you&rsquo;re about to find out, not all electronic systems of password storage are <a href="https://www.teampassword.com/blog/10-things-you-need-to-do-to-keep-passwords-safe" target="_blank" rel="noopener">safe</a>. Here are five of the most dangerous ways to store your passwords.&nbsp;
But before we begin:
Avoid bad idea passwords and dangerous storage methods with TeamPassword. This advanced <a href="https://www.teampassword.com/blog/why-you-need-a-password-manager" target="_blank" rel="noopener">password manager</a> features a selection of security features, including password encryption and two-step verification. Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial" rel="follow">free trial</a> today.&nbsp;

<h2>1. Email</h2>
Have you ever emailed yourself a password to ensure you&rsquo;re never without it? Great idea, right? Actually, emailing yourself your passwords is a really bad idea, and here&rsquo;s why:
<ul>
<li>Emails are usually sent in plain text. Without encryption, your passwords are susceptible if your email account is ever compromised.&nbsp;</li>
<li>Unsafe passwords sent via email often pass through several systems and servers. There&rsquo;ll also be a copy in your sent folder. If someone else can access your email account, your passwords become vulnerable.&nbsp;</li>
<li>Some email platforms store data locally on a drive. If someone steals your computer, phone, or tablet, your passwords become vulnerable.</li>
</ul>
A really bad idea for passwords is to send them via email &mdash; either to yourself or someone else. <a href="https://www.teampassword.com/blog/have-i-been-hacked-how-to-know-for-sure" target="_blank" rel="noopener">Hackers </a>and scammers are more resourceful than ever, and they can often steal your information before you realize you&rsquo;ve been compromised.&nbsp;
It&rsquo;s tempting to send a quick email to yourself containing unsafe passwords when you sign up for new online services. For the sake of an extra minute or two, don&rsquo;t give fraudsters easy access to your accounts. Use an encrypted email vault to safeguard all your passwords.&nbsp;
<h2>2. Online Documents</h2>
A lot of people like the convenience of saving crucial information using online document systems such as Google Docs. But this is a bad idea for passwords, as these systems are designed for text &mdash; not sensitive data.
Yes, a password might protect your online document manager from unauthorized access. But what happens if that password is compromised? Many document software platforms don&rsquo;t offer encryption, two-step verification, or even the most basic security measures.&nbsp;
If you use online documents regularly, you&rsquo;re probably accessing your account on a regular basis &mdash; across several devices. What happens if you step away for a moment to buy a coffee, speak to a friend, or use the bathroom?
A criminal can access an unattended online document platform in seconds. And if this happens, it doesn't take a lot of effort to steal your unsafe passwords.&nbsp;
<h2>3. Instant Messaging Service</h2>
Instant messaging services provide us with a convenient way of staying in touch with friends and family. WhatsApp, Facebook Messenger, and Snapchat were designed for private online conversations &mdash; not for storing passwords.
People who store their passwords on these apps do so because they believe they&rsquo;re fully encrypted. While that&rsquo;s often the case, it&rsquo;s important to remember that instant messaging services are often left open and operating in the background.
Imagine someone picks up your phone while you&rsquo;re not paying attention. If you left your device unlocked, that person would be able to access your password in seconds.
It&rsquo;s always a bad idea when passwords are stored on instant messaging services. By nature, these apps are designed to operate in the background &mdash; alerting you when someone sends a message. And because they&rsquo;re open, anyone with the device in their hand might be able to steal your unprotected passwords.&nbsp;
Don&rsquo;t fall into the trap of utilizing bad ideas for password storage. Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial" target="_blank" rel="noopener">free trial</a> with TeamPassword, and give your unsafe passwords the protection they require.
<h2>4. Online Note-taker</h2>
Developers design online note-takers for everyday lists and reminders. While they&rsquo;re great for creating to-do and shopping lists, they&rsquo;re not so good for storing unsafe passwords.&nbsp;
An app such as Apple Notes is easy to use, accessible, and convenient. But it doesn&rsquo;t offer two-step authentication, encryption, or any sophisticated form of security.&nbsp;
If your computer or mobile device is unlocked, your saved passwords are vulnerable. In many cases, a criminal would simply need to open the app to gain access to your sensitive information.&nbsp;
OK, you might be extra vigilant when it comes to keeping your phone or computer locked. But hackers are resourceful, and they&rsquo;re very good at discovering unsafe passwords. Once they access your phone, any passwords stored in your note-taking app become vulnerable.&nbsp;
<h2>5. On a Non-Password-Protected Device</h2>
Of all the bad ideas for passwords, storing them on non-password-protected devices is about the worst. You might think that your tablet or laptop never leaves your side. But if your device is ever stolen, you&rsquo;ve given the criminals the easiest possible opportunity to access your saved passwords.&nbsp;
If you&rsquo;re determined to store passwords on a physical device &mdash; which is never a good idea &mdash; make sure the device password is a complex combination of letters, numbers, and symbols. And it should contain at least 12 characters.&nbsp;
<h2>Use TeamPassword for Extra Protection</h2>
Remembering and safely storing a dozen or more passwords isn&rsquo;t a simple task. By locking away all your passwords in a digital vault, you get maximum protection and easy access.&nbsp;
TeamPassword offers a range of <a href="https://www.teampassword.com/security" target="_blank" rel="noopener">security features</a> &mdash; designed to keep your passwords safe. Offering two-step authentication and encryption, this powerful protection system solves the problem of unsafe passwords with ease. Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial" target="_blank" rel="noopener">free trial</a> to see these exciting features for yourself.&nbsp;

Storing passwords inappropriately can leave you open to fraud and theft. Avoid these storage methods at all costs. | TeamPassword Blog

Storing passwords inappropriately can leave you open to fraud and theft. Avoid these storage methods at all costs. ...

Top 5 Dangerous Ways to Store Your Passwords

Mustang Panda is a Chinese cyberespionage group that primarily targets non-governmental organizations (NGOs) and US think tanks. It's unclear whether Mustang Panda operates independently or works for the Chinese government.
The group is somewhat creative in its ability to use legitimate software and tools to mask the deployment of malware and trojans.
Keep your passwords safe from bad actors like Mustang Panda. Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword trial</a> and prevent attackers from breaching your digital assets.
&rlm;&rlm;&lrm; &lrm;
Try our <a href="https://app.teampassword.com/dashboard#signup/testimonial" rel="follow">14-day free trial</a> and start protecting yourself today with TeamPassword
&rlm;&rlm;&lrm; &lrm;
<h2>Who is Mustang Panda?</h2>
Mustang Panda was first discovered in 2017 by CrowdStrike, but there are indications that the group has been active since as early as 2014.
Mustang Panda attacks government entities and NGOs, especially those critical of China. The group has a preference for NGOs working on social, humanitarian, and environmental policies.
These NGOs often challenge government policies, so it makes sense that state entities (not just China) would attempt to spy on these organizations. They may want to find out protected sources, sensitive research information, steal intellectual property or even discredit the NGO's work.
Most of Mustang Panda's operations are in Southern and Southeast Asia but are particularly active in Mongolia. The group has also attacked NGOs, religious institutions, and think tanks in the United States, the United Kingdom, Australia, and Europe.
<h3>Mustang Panda Aliases</h3>
Here is a list of Mustang Panda aliases assigned by intelligence agencies and security firms:
<ul>
<li style="font-weight: 400;" aria-level="1">Bronze President</li>
<li style="font-weight: 400;" aria-level="1">TEMP.Hex</li>
<li style="font-weight: 400;" aria-level="1">HoneyMyte</li>
<li style="font-weight: 400;" aria-level="1">LuminousMoth</li>
<li style="font-weight: 400;" aria-level="1">Red Lich</li>
<li style="font-weight: 400;" aria-level="1">TA416</li>
<li style="font-weight: 400;" aria-level="1">RedDelta (Some security analysts are unsure if RedDelta is, in fact, Mustang Panda. But there are a lot of similarities. Only a few toolsets and minor tactics differ.)</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
<h2>What does Mustang Panda do?</h2>
Mustang Panda's primary objective appears to be gathering intelligence on NGOs, nonprofits, religious organizations, and think tanks. It's likely to provide China with intel to get ahead of bad press or attempt to influence policy in other countries.
Mustang Panda is excellent at exploiting software vulnerabilities and using familiar tools, like Google Drive and link shorteners, so users are less likely to be suspicious.
The group often sends PDFs to its victims that require an "Adobe Flash Update." Clicking the UPDATE button drops Mustang Panda's malware and trojans, providing access to the victim's device and network.
More recently, Mustang Panda has exploited COVID-19 by creating a fully functioning infection-tracking app for Android devices. The app contains SpyNote Remote Access Trojan (RAT), allowing Mustang Panda to monitor a user's activity, control the camera and microphone, access and copy all the phone's data, intercept incoming calls and texts&mdash;essentially use the device as the user does!
In addition to apps, Mustang Panda also used a spear-phishing campaign to send a malicious PDF with "COVID-19 information."
&rlm;&rlm;&lrm; &lrm;
<h2>Famous Mustang Panda Attacks</h2>
Mustang Panda is somewhat new compared to other Chinese advanced persistent threat groups like Goblin Panda, Emissary Panda, and Gothic Panda&mdash;to name a few!
<h3>The Vatican &amp; Catholic Churches - 2020</h3>
With negotiations set to take place between The Vatican and the Chinese Communist Party (CCP) in September 2020, Mustang Panda (operating as RedDelta) successfully infiltrated several Catholic organizations in March 2020, including the Vatican.
The CCP was looking for more control and insight over the Catholic church in China. So hacking these institutions would provide them with intel and possibly leverage over the negotiations.
RedDelta gained access through a spear-phishing attack&mdash;an email from the Vatican to Msgr. Javier Corona Herrera, a chaplain at the Hong Kong Study Mission to China.
The attachment contained a message of sadness about the recent death of a bishop. Also included was malware giving RedDelta to the Hong Kong Study Mission to China's offices and the Vatican's mail servers.
From there, RedDelta moved laterally through the Vatican's systems using intelligence to send highly relevant spear-phishing campaigns.
<h3>LuminousMoth Campaign - 2020</h3>
In 2020, Mustang Panda (operating as LuminousMoth) successfully hacked around 1,500 victims in Myanmar and the Philippines.&nbsp;
First, LuminousMoth targeted victims through a spear-phishing campaign that downloaded malware and trojans to the victim's device&mdash;at the same time, copying these files to any removable USB drives.
LuminousMoth would have access to any other devices using the same USB drive.&nbsp;
Security analysts were a little confused by the LuminousMoth campaign as it didn't appear to have any real target or goal. Unusual for cyberespionage groups.&nbsp;
The LuminousMoth campaign was likely a way for Mustang Panda to test new tools and tactics.
&rlm;&rlm;&lrm; &lrm;
<h2>Is Your Company Prepared for Cyber Attacks?</h2>
It feels like we hear about fresh cyberattacks and methods every day! Cyber attacks are no longer something large organizations and government institutions need to worry about.
Effective <a href="https://teampassword.com/blog/cybersecurity-for-small-businesses">cybersecurity for small businesses</a> is crucial to protect your company, clients, and team members from attacks.&nbsp;
These are our top 5 tips for <a href="https://teampassword.com/blog/5-tips-to-increase-security-for-your-remote-workforce">increasing cybersecurity at your company</a>.
<h3>1 - Use a Password Manager - TeamPassword</h3>
A <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager</a> is an essential tool for companies to share passwords safely with team members, contractors, and freelancers.
We designed <a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> with small businesses and agencies in mind. With TeamPassword, you never expose raw login credentials&mdash;mitigating the risk of unauthorized sharing and access.
Create groups in TeamPassword for different teams, client accounts, or projects, so you only provide access to those who need it!
The robust password manager also features a built-in <a href="https://teampassword.com/password-generator">password generator</a>, <a href="https://teampassword.com/blog/password-manager-with-2fa">two-factor authentication (2FA)</a>, activity logging, email notifications, and other essential security features.
<h3>2 - Educate Employees</h3>
Educating your team is key to preventing cyber attacks. This education isn't a one-off event&mdash;security risks change and evolve all the time.&nbsp;
Creating a dedicated security Slack channel or company cybersecurity wiki is one way your team can stay on top of attack trends and vulnerabilities.
<h3>3 - Always Install Updates</h3>
Software and firmware updates fix bugs and other security vulnerabilities. These bugs provide attackers with creative methods to breach apps and systems&mdash;so updating is crucial.
Make sure you and your team always install updates as soon as they're available.
<h3>4 - Keep Personal &amp; Work Devices Separate</h3>
Always mandate that employees use a separate device for work&mdash;preferably a company-issued computer or laptop set up by your company's IT team.
Employees must not use these devices for personal email or surf the web. By separating work and personal devices, you eliminate the risk of being a casualty if your employee falls victim to a personal cyber attack.
<h3>5 - Implement Two-Factor Authentication (2FA)</h3>
2FA is an affordable and highly effective way to prevent attackers from breaching your accounts, even if they steal a team member's password.
For example, <a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> uses 2FA for logging in. Employees have to enter their password, plus a random six-digit code from Google Authenticator to access their account.
Without the employee's device (iOS or Android), attackers can't log into TeamPassword, even if they've stolen their password.
&rlm;&rlm;&lrm; &lrm;
<h2>Try TeamPassword for Free!</h2>
Cybersecurity starts with protecting your account passwords. Prevent attackers from stealing your company's passwords with <a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a>. <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a free trial today</a>!

Mustang Panda is a cyberespionage group that targets non-governmental organizations, but how can you protect your company from this group?

Mustang Panda is a cyberespionage group that targets non-governmental organizations, but how can you protect your company from ...

Who is Mustang Panda and how can you protect yourself?

Goblin Panda is one of a handful of elite Chinese advanced persistent threat (APT) groups. Most Chinese APTs target the United States and NATO, but Goblin Panda focuses primarily on Southeast Asia.
The group is highly active, carrying out regular attacks since CrowdStrike first observed them in 2013.
&rlm;&rlm;&lrm; &lrm;
Using a password manager can help your business prevent <a href="https://teampassword.com/blog/category/data-breaches">data breaches</a>. Secure your company's digital assets and sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial">free TeamPassword trial</a> today!
&rlm;&rlm;&lrm; &lrm;
<h2>Who is Goblin Panda?</h2>
Goblin Panda is one of China's most active cyberespionage groups&mdash;some speculate one of the most active APT groups in the world! The group carries out regular attacks in Southeast Asia and Japan but is most active in Vietnam.
Intelligence agencies and security firms have been unable to distinguish whether Goblin Panda works directly for the Chinese government or acts as a contractor.&nbsp;
<h3>Goblin Panda Aliases</h3>
Goblin Panda goes by several aliases, including:
<ul>
<li style="font-weight: 400;" aria-level="1">Hellsing</li>
<li style="font-weight: 400;" aria-level="1">Conimes</li>
<li style="font-weight: 400;" aria-level="1">Cycldek</li>
<li style="font-weight: 400;" aria-level="1">1937CN</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
<h2>What does Goblin Panda do?</h2>
Goblin Panda is famous for delivering exploits in Microsoft Office Word attachments which drop malware and trojans onto the victim's device upon opening.
The group targets its victims through researched spear-phishing email campaigns, sending personalized emails with document attachments.
These documents are usually specific to the region and user. For example, in Vietnam, Goblin Panda regularly creates fake "official" Vietnamese government documents written in Vietnamese.
The group's focus on Southeast Asia, South Korea, and Japan are to gather intelligence on China's neighbors in disputes over the contested waters and islands of the South China Sea.
Goblin Panda is also responsible for attacks in Europe, the United States, Australia, the Middle East, and Africa.
&rlm;&rlm;&lrm; &lrm;
<h2>Famous Goblin Panda Attacks</h2>
Goblin Panda's primary targets are in defense, energy, and government entities. The group usually uses PlugX and HttpTunnel malware to create "backdoors"&mdash;tools and tactics that Chinese hacker groups commonly use.
<h3>The Philippines and Vietnamese Website Attacks - 2015</h3>
Goblin Panda (operating under 1937CN) went on a hacking spree in 2015, attacking around 1,000 websites in Vietnam and 200 in the Philippines.&nbsp;
The Vietnamese websites included 15 state-run websites and 50 education sites.
Attacks like these on Southeast Asian nations are common and often linked to Goblin Panda/1937CN.
<h3>Attacks on Multiple Vietnamese Airports - 2016</h3>
In 2016, Goblin Panda (operating under 1937CN) attacked 21 Vietnamese airports, including Hanoi's Noi Bai International Airport and Ho Chi Minh City's Tan Son Nhat International Airport.
The group took over public address systems, including loudspeakers and information screens, to communicate offensive language and Chinese propaganda about the South China Sea.
The airports had to disconnect the internet temporarily and complete check-ins, boarding, announcements, and flight information manually.&nbsp;
At the same time, 1937CN hacked and "defaced" Vietnam Airlines' website and managed to steal personal data for 411,000 passengers.&nbsp;
The motive for the 2016 attack was to send Vietnam and the Philippines a warning message&mdash;likely in connection with South China Sea's disputed waters.
This attack is exceptionally brazen and unusual for an advanced persistent threat. Most groups prefer covert operations and avoid revealing anything that could tie them back to their respective government.
Goblin Panda's messages through Vietnam's airports are very public threats to Southeast Asian nations from the Chinese government.
&rlm;&rlm;&lrm; &lrm;
<h2>First Steps to Prevent Cyber Attacks</h2>
Cyberattacks have increased significantly since the start of the pandemic. As lockdowns continue and people get desperate, we'll likely see even more breaches and ransomware attacks.
You must have robust systems in place to prevent breaches and cyber attacks. Your team members are the first line of defense, so <a href="https://teampassword.com/blog/your-passwords-are-only-as-secure-as-your-teams">educating employees about cybersecurity</a> must be a priority!
As sophisticated as a group like Goblin Panda might be, they still need to steal a user's password to access systems and networks.
Nearly all breaches happen because attackers manage to steal a team member's credentials. <a href="https://app.teampassword.com/dashboard#signup/testimonial">Securing your company's passwords</a> is another crucial step to preventing breaches and unauthorized credential sharing.
&rlm;&rlm;&lrm; &lrm;
<h2>Secure Password Management with TeamPassword</h2>
<a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> makes it safe and easy for small businesses to manage passwords. Sharing passwords via email, Slack, spreadsheets, and other unsecure methods, increases your risk of attack significantly!
With TeamPassword, you never share login credentials. Instead, each team member gets a TeamPassword account and then uses a browser extension (Chrome, Firefox, and Safari) to access applications, websites, and other accounts.
<h3>Groups and Sharing</h3>
TeamPassword lets you create unlimited groups for sharing access to accounts. For example, your social media group in TeamPassword would access your social media accounts and scheduling software.&nbsp;
If you need to hire a freelancer or contractor, simply add them to a group and remove them when they're done&mdash;no need to worry about changing passwords just because someone has left the team or company.
You can also use the same TeamPassword account for all of your client's digital assets. Keeping all your credentials in one place eliminates the risk of team members distributing passwords across spreadsheets, email, and Slack threads.
<h3>Activity Log &amp; Email Notifications</h3>
Stay on top of team member activity and prevent unauthorized access and sharing with TeamPassword's activity log and email notifications.
TeamPassword lets you create instant email notifications for every action (logins, credential sharing, new accounts, and more)&mdash;allowing you to keep track of your most sensitive data.
<h3>Secure Unique Password Generator</h3>
Using the same password for multiple accounts makes it easy for hackers to take over your entire digital portfolio, FAST. Weak passwords are another common mistake small businesses make.
With TeamPassword's built-in <a href="https://teampassword.com/password-generator">secure unique password generator</a>, you never have to worry about weak passwords or using the same credentials more than once.&nbsp;
The password generator lets you create secure passwords from 12-32 characters with uppercase, lowercase, numbers, and symbols.
<h3>Two-Factor Authentication (2FA)</h3>
Two-factor authentication (2FA) is crucial for keeping your <a href="https://teampassword.com/blog/password-manager-with-2fa">TeamPassword account safe from hackers</a>. TeamPassword uses Google Authenticator, available on all iOS and Android devices.
Even if attackers manage to steal an employee's TeamPassword credentials, 2FA will prevent them from accessing their account.
&rlm;&rlm;&lrm; &lrm;
<h2>Get a Free TeamPassword Account</h2>
Test our robust <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager</a> with your team to see how easy and secure credential sharing can be with TeamPassword. Sign up for TeamPassword and get a <a href="https://app.teampassword.com/dashboard#signup/testimonial">free 14-day trial</a> today!

Goblin Panda is one of the elite Chinese advanced persistent threat groups. So how can you protect your company from them? | TeamPassword

Goblin Panda is one of the elite Chinese advanced persistent threat groups. So how can you protect your ...

Who is Goblin Panda and how can you protect yourself?

Gothic Panda is a known Chinese state-sponsored cyberespionage group. The highly skilled attackers regularly use zero-day exploits to breach networks&mdash;a sophisticated hacking technique that takes weeks or months to execute.
The group has been operating since the mid-2000s attacking various state contractors in the United States and US government entities.
We saw a <a href="https://teampassword.com/blog/the-biggest-data-breaches-of-2020">significant increase in cyber-attacks in 2020</a>. Is your business protected?
&rlm;&rlm;&lrm; &lrm;
Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial">free 14-day TeamPassword trial</a> and protect your company's digital assets from attacks!
&rlm;&rlm;&lrm; &lrm;
<h2>Who is Gothic Panda?</h2>
Gothic Panda is an advanced persistent threat group known to US Intelligence as APT3. Investigations revealed that Gothic Panda has direct links to the Chinese Ministry of State Security (MSS) and other Chinese agencies.
Until 2015, Gothic Panda's primary target was the United States. But, since March 2016, the group's focus shifted to Hong Kong, where they attacked political entities and critics of the Chinese Communist Party.
<h3>Gothic Panda Aliases</h3>
Gothic Panda goes by many aliases assigned by intelligence agencies and security firms.
<ul>
<li style="font-weight: 400;" aria-level="1">APT3 (Advanced Persistent Threat 3 - US federal government classification)</li>
<li style="font-weight: 400;" aria-level="1">Buckeye</li>
<li style="font-weight: 400;" aria-level="1">TG-0110</li>
<li style="font-weight: 400;" aria-level="1">Bronze Mayfair</li>
<li style="font-weight: 400;" aria-level="1">UPS Team</li>
<li style="font-weight: 400;" aria-level="1">Group 6</li>
<li style="font-weight: 400;" aria-level="1">Pirpi</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
<h2>What does Gothic Panda do?</h2>
Gothic Panda hacks tech, transportation, telecommunications, aerospace, and defense companies to steal intellectual property.&nbsp;
In addition, the group attacks India, Vietnam, Hong Kong, the US, and NATO-aligned state entities to gather intelligence and steal state secrets.
Gothic Panda has an extensive range of tools and techniques to breach systems and networks. The group is especially good at zero-day exploits and spear-phishing attacks.
Once inside a system, Gothic Panda uses highly sophisticated tools to provide remote access, create multiple "backdoors," and remain undetected for months.
&rlm;&rlm;&lrm; &lrm;
<h2>Famous Gothic Panda Attacks</h2>
Due to the sensitive data and the high-level state entities Gothic Panda targets, we know little about many of the group's attacks.
<h3>Operation Clandestine Fox - 2014</h3>
Operation Clandestine Fox is one of Gothic Panda's first significant zero-day attacks. The group discovered an unknown vulnerability in Microsoft's Internet Explorer (IE), allowing them to get around the browser's security features.
By circumventing IE's security, Gothic Panda could infect a user's device through watering-hole attacks. The security vulnerability affected an Adobe Flash plugin for IE6 to IE11, but Gothic Panda targeted IE9 and IE10 users.
Disabling Adobe Flash meant you could use IE without worrying about the attack, but most people discontinued using Microsoft's browser until they fixed the problem&mdash;some never returned to IE!
Luckily, FireEye Research Labs found the zero-day exploit early. Still, it took several days for Microsoft to fix the vulnerability, and only a few users fell victim to Operation Clandestine Fox.
In a statement, Microsoft stated: "The reality is there have been a very small number of attacks based on this particular vulnerability and concerns were, frankly, overblown."
<h3>Operation Clandestine Fox - Part 2 - 2014</h3>
Shortly after Microsoft fixed IE, Gothic Panda switched tactics to contacting US companies through a spear-phishing campaign.&nbsp;
The perpetrators would first "friend" or "follow" a victim's friends and family on social media. Next, they would send direct messages (DMs) and emails pitching themselves as potential tech candidates looking for work.
The correspondence contained malicious links and attachments designed to provide Gothic Panda access to the user's device.
The tools and tactics were identical to Operation Clandestine Fox, leading investigators to believe the group had quickly changed its method of attack after the Microsoft patch on IE.
<h3>DoublePulsar Backdoor - 2016</h3>
In 2017, hacker group The Shadow Brokers leaked tools and zero-day exploits from "Equation Group," a suspected branch of the National Security Agency (NSA).
While there was no evidence to tie Gothic Panda to The Shadow Brokers leak in 2017, the group used variants of Equation Group's leaked tools in 2016 for cyberattacks in Belgium, Luxembourg, Hong Kong, Vietnam, and the Philippines.
Investigators believe that either Gothic Panda had stolen these tools earlier or The Shadow Brokers weren't the source of the 2017 leak.
<h3>C919 airplane - 2010 to 2015</h3>
A 2019 report from security firm CrowdStrike shows how the Chinese Ministry of State Security used multiple hacker groups, including Gothic Panda, to breach aviation and aerospace companies worldwide.
When hackers could not breach a target, the MSS recruited Chinese nationals working at these companies to install malware on the victim's network.
The MSS wanted to steal intellectual property to help a Chinese state-owned aerospace manufacturer build its C919 airplane.&nbsp;
The operation was a success for China, but experts pointed out more than 20 parts and equipment on the C919 stolen from primarily European and American companies.
The United States indicted several Chinese nationals, but China hasn't responded to requests for extradition.
&rlm;&rlm;&lrm; &lrm;
<h2>Protect Your Business from Cyber Attacks</h2>
Cyber attacks are increasing at an alarming rate. We saw many <a href="https://teampassword.com/blog/the-biggest-data-breaches-of-2020">significant data breaches in 2020</a>, including the infamous SolarWinds attack and the <a href="https://teampassword.com/blog/what-happened-with-the-cam4-data-leak">CAM4 data leak</a>.
More recently, we've seen how attackers <a href="https://teampassword.com/blog/t-mobile-data-breach-2021-what-happened">breached T-Mobile</a>, affecting around 40 million users!
Preventing attacks starts with <a href="https://teampassword.com/blog/your-passwords-are-only-as-secure-as-your-teams">educating employees about cybersecurity risks</a>. Most attacks happen due to human error, so a well-educated, vigilant team will thwart most attacks.
Secondly, make sure you update software, firmware, and applications as soon as an update is released. These updates often fix zero-day exploits and other vulnerabilities groups like Gothic Panda use for attacks.
The next step is to protect your passwords. Using a <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager like TeamPassword</a> allows you to <a href="https://teampassword.com/blog/how-to-safely-share-passwords-with-coworkers">share access safely</a> without exposing passwords.
Instead of entering credentials, team members use one of TeamPassword's browser extensions (Chrome, Firefox, and Safari) to log in to social media, productivity tools, web apps, and other accounts your company uses.
You can create groups for sharing credentials and remove a team member when they no longer need access. This feature is fantastic for businesses that regularly <a href="https://teampassword.com/blog/keeping-data-secure-when-working-with-freelancers">share passwords with freelancers and contractors</a>.
Instead of sharing multiple passwords, you share one key to unlock them all. <a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> has an activity log and email notifications so you can monitor user behavior and prevent unauthorized access.
Other TeamPassword security features include:
<ul>
<li style="font-weight: 400;" aria-level="1">Two-factor authentication (2FA)</li>
<li style="font-weight: 400;" aria-level="1">Built-in secure password generator</li>
<li style="font-weight: 400;" aria-level="1">Advanced encryption technology</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
TeamPassword offers a <a href="https://app.teampassword.com/dashboard#signup/testimonial">free 14-day trial</a> for businesses to test the password manager's features with team members.

Gothic Panda is a known Chinese state-sponsored cyberespionage group, so what can you do to protect yourself from Gothic Panda?

Gothic Panda is a known Chinese state-sponsored cyberespionage group, so what can you do to protect yourself from ...

Who is Gothic Panda and how can you protect yourself?

Energetic Bear is likely one of Russia's oldest cyberespionage groups. Active since around 2005, Energetic Bear primarily attacks US infrastructure with a preference for the energy sector.
US Intelligence has linked Energetic Bear to Russia's FSB (formally the KGB), but it's unclear if the group works directly for Russian Intelligence or operates as a contractor. There is speculation that Energetic Bear moonlights as a criminal gang to hide its direct ties to the Russian government.
We saw some <a href="https://teampassword.com/blog/the-biggest-data-breaches-of-2020">big data breaches in 2020</a>! Make sure your company is secure.
&rlm;&rlm;&lrm; &lrm;
<a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a 14-day TeamPassword trial</a> to prevent attackers from stealing your company's many account credentials.
&rlm;&rlm;&lrm; &lrm;
<h2>Who is Energetic Bear?</h2>
Energetic Bear is a Russian advanced persistent threat that regularly attacks US government infrastructure, including private contractors, to gather intelligence.
While Energetic Bear seems to focus on the United States, German intelligence linked the group to several 2020 attacks against the country's energy, water, and power sectors.
Energetic Bear got its name from CrowdStrike. "Energetic" being the group's codename, while "Bear" refers to a Russian advanced persistent threat group.
<h3>Energetic Bear Aliases</h3>
<ul>
<li style="font-weight: 400;" aria-level="1">Berserk Bear (Just as commonly used to reference the group as Energetic Bear)</li>
<li style="font-weight: 400;" aria-level="1">Crouching Yeti</li>
<li style="font-weight: 400;" aria-level="1">Dragonfly</li>
<li style="font-weight: 400;" aria-level="1">Dragonfly 2.0 (There is some indication that this group is a sub-group or close affiliate of Energetic Bear)</li>
<li style="font-weight: 400;" aria-level="1">DYMALLOY</li>
<li style="font-weight: 400;" aria-level="1">Dymallos</li>
<li style="font-weight: 400;" aria-level="1">Havex (One of the group's custom malware)</li>
<li style="font-weight: 400;" aria-level="1">IRON LIBERTY</li>
<li style="font-weight: 400;" aria-level="1">Koala</li>
<li style="font-weight: 400;" aria-level="1">TeamSpy</li>
<li style="font-weight: 400;" aria-level="1">TG-4192</li>
<li style="font-weight: 400;" aria-level="1">Castle</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
<h2>What does Energetic Bear do?</h2>
Energetic Bear's primary goal is to collect intelligence and steal intellectual property in the energy industry, but they often try to breach aviation networks.
What makes Energetic Bear unique compared to other advanced persistent threat groups is its focus. Many cyberespionage groups attempt to access any multinational or government organization&mdash;Energetic Bear never strays far from utility infrastructure.
US Intelligence agencies and security analysts believe Energetic Bear's goal is to delegitimize SLTT (state, local, tribal, and territorial) government entities. By doing so, Energetic Bear can destabilize the country (or regions) and possibly influence elections.
The group is known for using several modes of attack, including spear-phishing, waterhole attacks, and compromising legitimate software packages.
Most of their toolsets are custom-made by the group, and their tactical, methodical approach allows Energetic Bear to remain undetected for long periods.
&rlm;&rlm;&lrm; &lrm;
<h2>Famous Energetic Bear Attacks</h2>
As an active group since around 2005, Energetic Bear has been involved in many cyber attacks. Energetic Bear is also known for mimicking other hacker groups, making it difficult to know the extent of their crimes.
<h3>LightsOut Exploit - 2014</h3>
In 2014, Energetic Bear (identified as Dragonfly during this attack) used a watering hole attack to target multiple organizations in the energy sector.
Dragonfly compromised the website of a law firm that works with US energy firms to redirect users to another website while simultaneously installing a LightsOut exploit kit on the user's browser.
The LightsOut exploit kit conducts several diagnostics on the user's device to determine which malware and trojans to deploy. It then drops and attempts to install malicious payloads on the user's device.
Energetic Bear can then monitor the device, including configurations, clipboard data, and keystrokes. This information allows Energetic Bear to gather credentials and configurations to log into systems and networks.
Reports are vague about the extent of Energetic Bear's victims or the data compromised during the 2014 attacks.
<h3>United States Federal Government Data Breach - 2020</h3>
Energetic Bear is a prime suspect in one of the United States' worst cyberespionage incidents in history.&nbsp;
The 2020 attack infiltrated multiple US federal government institutions, including the US Treasury Department, the National Telecommunications and Information Administration, the US Department of Commerce, and many more.
Beyond the United States, the Energetic Bear stole data that affected NATO, the UK government, the European Parliament, and at least 200 more foreign organizations.
The attackers used multiple entry points, and investigators estimate the group was active on the network for eight to nine months before being detected.
Software vulnerabilities in Microsoft and VMware provided Energetic Bear with emails and other documents to carry out spear-phishing attacks. At the same time, stolen credentials from SolarWinds's Orion software provided further access.
Investigators believe this was a coordinated effort from several Russian cyberespionage groups, including Energetic Bear, <a href="https://teampassword.com/blog/who-is-fancy-bear-and-how-can-you-protect-yourself">Fancy Bear</a>, and <a href="https://teampassword.com/blog/who-is-cozy-bear-and-how-can-you-protect-yourself">Cozy Bear</a>.
&rlm;&rlm;&rlm;&lrm; &lrm;&lrm; &lrm;&nbsp;
<h2>Is Your Company Prepared for Cyber Attacks?</h2>
Stopping attackers like Energetic Bear is difficult but not impossible. While they use clever tactics and malware to infect a user's PC, they still need to steal login credentials to gain full access.
A <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager</a> allows your team members to access systems, accounts, and web applications without using raw credentials. So, even if an attacker is monitoring their device, they'll never expose account passwords.
<h3>Protecting Your Business with TeamPassword</h3>
<a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> is a robust password manager designed for sharing credentials safely amongst team members, contractors, and freelancers.
Instead of using raw credentials, team members use one of TeamPassword's browser extensions (Chrome, Firefox, and Safari) to login into apps, software, and online accounts.&nbsp;
You can create groups for sharing passwords and only provide access to those who need it. Because team members use TeamPassword, they never see the actual password, mitigating the risk of authorized <a href="https://teampassword.com/blog/how-to-safely-share-passwords-with-coworkers">credential sharing</a>.
And, when a team member no longer needs access, remove them with one click. No need to change passwords every time someone leaves a project!
If you need to change credentials, TeamPassword's built-in <a href="https://teampassword.com/password-generator">secure password generator</a> allows you to create a unique 12-32 character password instantly. TeamPassword also updates these new credentials for all users.
One of TeamPassword's best security features is <a href="https://teampassword.com/blog/password-manager-with-2fa">two-factor authentication (2FA)</a>. By setting up 2FA, team members must use Google Authenticate to access their TeamPassword account. So, even if attackers steal login credentials, they can't access TeamPassword without the second authentication step.
Another fantastic security feature is TeamPassword's activity log and email notifications. With the activity log, you can review every action from users on TeamPassword, making it easy to identify who is responsible for the authorized credential sharing or login attempts.
Additionally, you can set up email notifications to live-track every TeamPassword action (logins, password sharing, new accounts, and more).
&rlm;&rlm;&lrm; &lrm;
<h2>Secure Your Company's Digital Assets Today!</h2>
Stop sharing passwords in spreadsheets and emails&mdash;exposing your business, customers, and clients to cyber-attacks!
&rlm;&rlm;&lrm; &lrm;
Sign up for a <a href="https://app.teampassword.com/dashboard#signup/testimonial">14-day TeamPassword trial</a> and test our robust password manager with your team.

Energetic Bear is likely one of Russia's oldest hacker groups. What have they done during their time being active? let's take a dive in.

Energetic Bear is likely one of Russia's oldest hacker groups. What have they done during their time being ...

Who is Energetic Bear and how can you protect yourself?

Emissary Panda is a Chinese advanced persistent threat group notorious for using strategic Web compromises to target victims.
The group has been around since 2010 and is still highly active to this day&mdash;attacking governments and multinational corporations worldwide.
Cyber attacks are increasing at an alarming rate! Does your company have effective cybersecurity tools and systems to mitigate breaches? <a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> allows you to protect your company's digital assets with a <a href="https://app.teampassword.com/dashboard#signup/testimonial">secure password management tool</a>.
&rlm;&rlm;&lrm; &lrm;
Try our <a href="https://app.teampassword.com/dashboard#signup/testimonial" rel="follow">14-day free trai</a>l to protect yourself
&rlm;&rlm;&lrm; &lrm;
<h2>Who is Emissary Panda?</h2>
Emissary Panda is a Chinese cyberespionage group that primarily targets aerospace, government, defense, technology, energy, and various manufacturing sectors.
Emissary Panda has been active since at least 2010 when they breached US defense contractors stealing terabytes of data!
The group is highly active in the Middle East and Asia and regularly attacks NATO allies, including the United States.
Emissary Panda got its name from the security firm CrowdStrike. "Emissary" being the group's codename, while "Panda" refers to a Chinese advanced persistent threat.
<h3>Emissary Panda Aliases</h3>
Emissary Panda goes by several aliases, including:
<ul>
<li style="font-weight: 400;" aria-level="1">TG-3390</li>
<li style="font-weight: 400;" aria-level="1">BRONZE UNION</li>
<li style="font-weight: 400;" aria-level="1">APT27 (Advanced Persistent Threat 27 - US federal government classification)</li>
<li style="font-weight: 400;" aria-level="1">Iron Tiger</li>
<li style="font-weight: 400;" aria-level="1">LuckyMouse</li>
<li style="font-weight: 400;" aria-level="1">TEMP.Hippo</li>
<li style="font-weight: 400;" aria-level="1">Red Phoenix</li>
<li style="font-weight: 400;" aria-level="1">Budworm</li>
<li style="font-weight: 400;" aria-level="1">Group 35</li>
<li style="font-weight: 400;" aria-level="1">ZipToken</li>
</ul>
Emissary Panda has collaborated with other Chinese cyberespionage groups, including Turbine Panda, Deep Panda, and APT26.
&rlm;&rlm;&lrm; &lrm;
<h2>What does Emissary Panda do?</h2>
Emissary Panda attacks government institutions and multinational organizations to steal state secrets and intellectual property.
The group is famous for installing web shells through software vulnerabilities and then installing multiple "backdoors," making it difficult to eradicate the attackers from a system.
Emissary Panda's malware and trojans are highly advanced, making it near impossible to detect the group or its movements through a network. The attackers use various pieces of malware to provide remote access, install backdoors, and hide their tracks by deleting user activity logs.
In some instances, Emissary Panda uses a mix of software vulnerabilities and spear-phishing to breach networks.
What makes Emissary Panda unique is the group's well-planned operations, often working for years before breaching their final target.&nbsp;&nbsp;
Until 2020, Emissary Panda's primary focus was cyber espionage and intelligence gathering. But since 2020, investigators have linked Emissary Panda to multiple <a href="https://teampassword.com/blog/colonial-pipeline-ransomware-attack-dont-reuse-passwords">ransomware attacks</a>.
&rlm;&rlm;&lrm; &lrm;
<h2>Famous Emissary Panda Attacks</h2>
Emissary Panda is a highly active group, constantly attacking organizations to steal information. These are just a few examples of Emissary Panda's attacks but showcase the sophisticated level of planning and execution.
<h3>Operation "Iron Tiger" - 2010 - 2013</h3>
Emissary Panda's first major attack was against a US defense contractor in 2013. But the operation started in Asia in 2010.
The group managed to steal a significant amount of military data, including emails, intellectual property, and strategic planning documents.
Iron Tiger was a well-coordinated cyberespionage operation spanning two continents with targets in Hong Kong, China, Tibet, the Philippines, and the United States.
In 2010, the attackers used spear-phishing attacks to target victims in China, Hong Kong, the Philippines, and Tibet. After breaching a system, Emissary Panda would lie silently, gathering intelligence.
After three years, Emissary Panda had the information it needed to go after bigger fish, mostly technology contractors for the United States government.&nbsp;
By the end of Operation "Iron Tiger," Emissary Panda had stolen terabytes of data, most of it from the United States. The sensitivity of this data posed a severe threat to US intelligence and military organizations.&nbsp;
<h3>Multiple Watering-Hole Attacks - 2015</h3>
In 2015, Dell SecureWorks unveiled a report at the Black Hat information security conference in Las Vegas.&nbsp;
The report detailed how Emissary Panda used more than 100 legitimate websites (for watering-hole attacks) to breach at least 50 US and UK organizations.&nbsp;
Emissary Panda relied on program vulnerabilities to inject malicious code into legitimate websites&mdash;mostly embassies and NGOs. Visitors would use the website as usual but navigating from one page to the next would automatically download an exploit onto the user's device.
The exploit would automatically set up a web shell for Emissary Panda to access the PC while at the same time creating backdoors and erasing user logs to remain undetected.
Emissary Panda spent time gathering intelligence and stealing credentials as they moved laterally through systems and networks. In some cases, they used spear-phishing attacks sent from legitimate email addresses to access other networks and organizations.
<h3>Emissary Panda's First Known Ransomware Attack - 2020</h3>
In 2020, Emissary Panda switched from cyber espionage to ransomware attacks&mdash;a highly unusual move for a typical advanced persistent threat group. The group targeted multiple gaming companies worldwide, breaching at least one.
The breach started at a third-party supplier, twice removed from the actual target before Emissary Panda eventually broke into the gaming company.
The group installed web shells and created multiple backdoors making it impossible to remove the attackers.
It's unclear who the gaming company was or whether or not they paid a ransom.
This attack shows that Emissary Panda is capable and willing to engage in all sorts of cybercrimes and not just gather intelligence.
&rlm;&rlm;&lrm; &lrm;
<h2>How Can You Protect Yourself Against Cyber Attacks?</h2>
Preventing a group like Emissary Panda is extremely difficult. These attackers rely on software vulnerabilities and human error to breach a target&mdash;often trying multiple attempts over many months and years.
The first step to prevent these sorts of attacks is for companies to update software and firmware regularly. These updates provide crucial bug fixes&mdash;the types of vulnerabilities that groups like Emissary Panda use to stage an attack.
Effective <a href="https://teampassword.com/blog/cybersecurity-for-small-businesses">cybersecurity is essential for small businesses</a>, especially if you work with <a href="https://teampassword.com/blog/keeping-data-secure-when-working-with-freelancers">contractors and freelancers</a>. We learn from Emissary Panda that cyber criminals often attack 3rd party providers to gain access to bigger fish.
&rlm;&rlm;&lrm; &lrm;
<h2>Secure Your Business with TeamPassword</h2>
TeamPassword is a <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager</a> designed for secure account authentication and safe credential sharing. You never share raw passwords, eliminating the risk of authorized access or sharing.
With TeamPassword, you can create groups for various accounts, so you only provide access to those who need it. When a team member no longer needs access, simply remove them with one click.
The password manager comes with two-factor authentication, preventing a full breach if attackers steal a user's credentials. <a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> also features an activity log, and you can set up email notifications for every action on the password manager.
Protect your company's digital assets with TeamPassword. Get a <a href="https://app.teampassword.com/dashboard#signup/testimonial">14-day free trial</a> to test our robust password management tool with your team today!

Emissary Panda is a Chinese cyberespionage group that has been active from 2010, but what really is Emissary Panda and what have they done?

Emissary Panda is a Chinese cyberespionage group that has been active from 2010, but what really is Emissary ...

Who is Emissary Panda and how can you protect yourself?

Who is Emissary Panda and How Can You Protect Yourself?

Deep Panda is a cyber espionage group from China with suspected links to the Chinese government. The group is highly sophisticated and diligent at covering its tracks&mdash;hence there is no clear evidence of who these individuals are or their affiliations.
All intelligence agencies and cyber security firms know for sure is that Deep Panda operates out of China.
With cyber-attacks on the rise, ALL companies must keep account credentials safe using a password manager like TeamPassword. <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a 14-day free trial</a>.
&rlm;&rlm;&lrm; &lrm;
<h2>Who is Deep Panda?</h2>
CrowdStrike was the first security firm to discover Deep Panda back in 2011 when the cyberespionage group attempted to hack a Fortune 500 company.
"Deep" is the group's reference name, while "Panda" is CrowdStrike's codename for Chinese hacker groups.
Deep Panda focuses on defense, finance, energy, pharmaceutical, telecommunications, high tech, education, manufacturing, and legal services.
The group primarily targets US governmental institutions and multinational corporations to steal state secrets and intellectual property. Security firms and intelligence agencies have also linked Deep Panda to Southeast Asia, Japan, and South America cyber attacks.
<h3>Deep Panda Aliases</h3>
Deep Panda has several aliases from security agencies and references to the group's malware.
<ul>
<li style="font-weight: 400;" aria-level="1">PinkPanther</li>
<li style="font-weight: 400;" aria-level="1">KungFu Kittens</li>
<li style="font-weight: 400;" aria-level="1">Group 72</li>
<li style="font-weight: 400;" aria-level="1">Shell Crew</li>
<li style="font-weight: 400;" aria-level="1">Black Vine</li>
<li style="font-weight: 400;" aria-level="1">WebMasters</li>
<li style="font-weight: 400;" aria-level="1">APT19 (Advanced Persistent Threat 19 - US federal government classification) - there is some contention among analysts whether Deep Panda is APT19.</li>
</ul>
&rlm;&rlm;&lrm; &lrm;
<h2>What does Deep Panda do?</h2>
Deep Panda's primary goal is to infiltrate networks to gather intelligence and steal state and private organization's secrets.
The group is highly organized and is known to remain undetected on networks for months at a time. Even when security teams know Deep Panda is on a network, it can take months to remove them completely.
Deep Panda uses multiple pieces of malware in a single attack. These packages help Deep Panda connect to a device or network, write code to infect other connected systems, and remove log data so that anyone monitoring the system won't know the group is online.
Deep Panda is also excellent at creating multiple "backdoors" once inside a system. These backdoors give Deep Panda continued access to a system, even when security teams change everyone's passwords.
In most cases, it takes months to get Deep Panda off of a network because they keep creating backdoors to outsmart those trying to remove them.
&rlm;&rlm;&lrm; &lrm;
<h2>Famous Deep Panda Attacks</h2>
Deep Panda is behind some of the most intricate and sophisticated attacks over the last decade. These are some of the group's biggest hits.
It's important to note that authorities and security analysts only suspect Deep Panda's involvement in these crimes due to the modus operandi and toolsets used in these attacks.
<h3>Adobe Breach 2013</h3>
In mid-2013, Deep Panda breached the Adobe ColdFusion web app server via a known software vulnerability.
Once inside, Deep Panda quickly installed malware, created backdoors, and began stealing user data, including usernames, passwords, and payment data, for 38 million Adobe users.
In addition, the group stole source code for Adobe Acrobat, Adobe Reader, Photoshop, and ColdFusion.
To rub salt in the wounds, Adobe had to settle a $1 million lawsuit filed by 15 state attorneys general.
<h3>United States Office of Personnel Management (OPM) Breach - 2015</h3>
In 2015, Deep Panda breached OPM with the intent of stealing government employee data. The group managed to steal 22.1 million government employees' personal records, including associated friends and family background checks.
At the time, the OPM attack was recorded as the biggest government data breach in history.
The records included full names, SSNs, dates and places of birth, and physical addresses.
Deep Panda managed to breach OPM's systems twice. In one of the breaches, attackers posed as an employee of OPM subcontractor, KeyPoint Government Solutions, to acquire legitimate login credentials.
Hackers used PlugX to create a backdoor into the system, a signature Deep Panda maneuver.
In 2017, the FBI arrested Chinese national Yu Pingan at LA International Airport for providing the "Sakula" malware used in the OPM data breach. Pingan spent 18 months in a federal detention center before pleading guilty. The US deported Pingan in 2019.
Security analysts believe the OPM attack was part of an operation to build a database of US government employees. The Chinese government uses these databases to recruit spies or bribe to obtain government secrets.
<h3>Anthem Medical Data Breach - 2015</h3>
In 2015 hackers breached Anthem's systems stealing approximately 80 million personal records&mdash;excluding payment and medical data.
The records included the following personal information:
<ul>
<li style="font-weight: 400;" aria-level="1">Full names</li>
<li style="font-weight: 400;" aria-level="1">Date of birth</li>
<li style="font-weight: 400;" aria-level="1">Medical IDs</li>
<li style="font-weight: 400;" aria-level="1">SSNs</li>
<li style="font-weight: 400;" aria-level="1">Home addresses</li>
<li style="font-weight: 400;" aria-level="1">Email addresses</li>
<li style="font-weight: 400;" aria-level="1">Employment information</li>
<li style="font-weight: 400;" aria-level="1">Income data</li>
</ul>
Analysts warned that criminals could use the Anthem data for identity theft scams or spear-phishing attacks.
US authorities have withheld any information to implicate any criminal group but have indicated that a foreign government likely ordered the attack.
Security analysts speculate that Deep Panda is responsible for the Anthem breach.
&rlm;&rlm;&lrm; &lrm;
<h2>How Does Deep Panda Breach Networks?</h2>
Deep Panda is highly skilled at finding software vulnerabilities and carrying out sophisticated social engineering attacks.
Deep Panda likely receives information from spies to acquire the intelligence necessary to carry out its attacks.&nbsp;
When Deep Panda breaches a system via a software vulnerability, they often set up a fake user to deploy a spear-phishing attack. Because the correspondence appears to come from the network, it's almost impossible for employees to know it's malicious.
Once a user clicks on one of the links, Deep Panda has access to the device and connected networks.
&rlm;&rlm;&lrm; &lrm;
<h2>How Can You Protect Yourself?</h2>
An advanced persistent threat is only concerned with institutions and businesses linked to governments or multinational corporations. While it's highly unlikely Deep Panda will ever attack your business, hackers using similar tactics might!
At TeamPassword, we're always advocating for businesses to <a href="https://teampassword.com/blog/cyber-security-awareness-month-and-teampassword">promote cyber security awareness</a>. Security vulnerabilities constantly evolve, so companies must regularly host cyber awareness sessions, especially if your team comprises <a href="https://teampassword.com/blog/5-tips-to-increase-security-for-your-remote-workforce">remote workers and freelancers</a>.
<h3>TeamPassword&mdash;Your First Line of Defence</h3>
<a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> makes sharing login credentials with coworkers and freelancers safe and easy. Use our built-in <a href="https://teampassword.com/password-generator">strong password generator</a> to create unique credentials for every account.
With all your passwords in one place, team members only need one of TeamPassword's browser extensions (Chrome, Firefox, and Safari) to log into websites, social media accounts, productivity tools, and more.
Our <a href="https://teampassword.com/blog/password-manager-with-2fa">password manager includes two-factor authentication (2FA)</a>, so even if attackers steal an employee's password, they can't gain access to your TeamPassword account.
Get the password manager with robust security features built for sharing. Let TeamPassword manage authentication so you can focus on creating amazing products and services for your customers.
<a href="https://app.teampassword.com/dashboard#signup/testimonial">&rlm;&rlm;&lrm; &lrm;Start your free 14-day TeamPassword trial today</a>.

Deep Panda is a cyber espionage group from China. What have they done to become infamouse? Let's take a deep dive into Deep Panda.

Deep Panda is a cyber espionage group from China. What have they done to become infamouse? Let's take ...

Who is Deep Panda and how can you protect yourself?

See the best way to come up with a new username. We break down types of usernames and give you the best username ideas out there.

See the best way to come up with a new username. We break down types of usernames, why ...

How to Make a Good Username | Create a Unique and Secure Username

See the best way to come up with a new username. We break down types of usernames, why secure usernames are important, and how to create them effectively!

Over the last decade, the gig economy boom has allowed professionals worldwide to switch to freelancing and build a network of international clients.&nbsp;
According to Upwork, 1 in 3 US workers engaged in freelance work during 2020. Some of the most successful freelancers earn hundreds of thousands of dollars per year through platforms like Upwork, Freelancer, and Toptal.
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Does your company hire freelancers? How do you <a href="https://teampassword.com/blog/should-i-share-data-with-freelancers">share passwords with freelancers</a>? TeamPassword is an affordable password management solution for small businesses, startups, and agencies to share credentials securely with team members and freelancers. <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a 14-day free trial</a> today.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h2>10 Successful Freelancers</h2>
Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field with excellent track records&mdash;many have worked with the biggest companies in the world!
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>1. Scott Luscombe - Graphic Designer / Shopify Expert / Website Developer / Copywriter&nbsp; - Canada</h3>
Scott Luscombe is a freelance graphic designer, Shopify expert, website developer, and copywriter from Uxbridge, Canada. He holds a degree in Illustration from Sheridan College and a degree in Marketing from the University of Toronto.
Scott has been a freelancer for most of his professional career and has earned over $500k on Upwork. He has completed over 311 jobs and worked&nbsp;10,956 hours!&nbsp;
Scott's work includes graphic design and branding, illustration and icons, copywriting, website design and development, UX/UI, and printing and packaging. He also provides freelance coaching and consulting. Scott is a Top Rated Upwork Freelancer currently charging $99 per hour for various creative gigs.
Some of Scott's most notable work includes designs for Coca-Cola, the Canadian Cancer Society, Nickelodeon, and Wallet Ninja (to name a few).&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>2. Kathy Edens - Marketing Consultant / Freelance Copywriter - United States</h3>
<a href="https://www.upwork.com/freelancers/~016177d19f0624c1a7?viewMode=1">Kathy Edens is a Top Rated Upwork Freelancer</a> with over $300k platform earnings! Kathy has been self-employed as a marketing consultant and freelance copywriter for almost ten years from her home in Ohio, United States.
She holds a Bachelor of Science in Professional Writing and Psychology from Oregon State University, which she says "...helps me understand how to reach your target audience with words."&nbsp;
Kathy has ghost-written several non-fiction books on various topics, including social entrepreneurship, healthcare, real estate investing, and the cannabis industry, to name a few.
Kathy also writes web content, sales pages, email marketing content, case studies, white papers, brochures, press releases, and more. Kathy's rates start at $86 per hour for her writing and marketing services.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h3>3. Koen van Oeveren - UX designer - Netherlands</h3>
Koen van Oeveren is a freelance UI &amp; UX designer from North Brabant, Netherlands, with almost ten years of experience. Koen works with several design agencies in the Netherlands, designing apps, websites, and eCommerce experiences for many international brands.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
Koen holds a Bachelor of Applied Science in Communication and Multimedia Design from Avans University in the Netherlands. Koen's <a href="https://www.koenvo.com/index.html">portfolio website Koenvo</a> was nominated for a <a href="https://www.awwwards.com/sites/koenvo-ui-ux-portfolio">2021 awwwards. Award</a>.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h3>4. Pascal Strasche - Product / UX designer - Germany</h3>
Pascal Strasche is a product and UX designer with more than ten years of design experience from Germany. He holds a Master of Arts in Interaction Design and a Bachelor of Arts in Graphic Design, both from HAWK University of Applied Sciences and Arts.
For almost a year over 2020/2021, Pascal worked as the sole product designer to design Con Cubo's SaaS tool that helps complex organizations visualize and manage teams. He's also worked with German steel giant XOM Materials to find product solutions to digitalize&nbsp;Germany's steel industry.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
In 2019, Pascal founded Product Design Resources, a growing archive of 800+ design resources, weekly updated for the design community.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>5. Paul Hunkin - Developer - New Zealand</h3>
Paul Hunkin is a freelance software consultant and developer from Tauranga, New Zealand, but currently living in Portugal.&nbsp;
Paul has over ten years of experience as a software developer with an impressive work history, including Google, NASA, InfoSys, and the Chinese aerospace industry leader COMAC.
He's worked with several early-stage startups designing everything from high-performance big-data systems to complex web applications to 3D rendering engines. He's also built a lot of the foundational code for independent games on Android.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Paul is a Top Rated Upwork Freelancer with over $400k in platform earnings. His rates start at $120 per hour for software development. <a href="https://paulh.consulting/">Check out Paul's website</a> for more about his impressive portfolio and work history.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>6. Jana Galat - Writer / Brand Strategist - Canada</h3>
Jana Galat is a freelance copywriter and brand strategist from Ontario, Canada. She holds a Bachelor's Degree in Management and Organizational Studies from King's University College and an Honors in Business Administration from Western University.
Jana has extensive experience writing landing pages, email campaigns, social media ads, and print materials and says, "I am obsessed with creating copy that sells..."
After several years of professional work experience, Jana went freelance in 2019 and has quickly built a reputation as a <a href="https://www.upwork.com/freelancers/~01bfa17a48301876dd">Top Rated Upwork Freelancer</a> with over $70k in platform earnings. Jana's rates start at $100 per hour for copywriting and brand consulting.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>7. Kate H. - Logo Designer / Branding Expert - United States</h3>
Kate is a freelance professional logo designer and branding expert from Maryland, United States. Kate&nbsp;ran her own green wedding brand which she sold to mywedding.com in 2014, allowing her to focus on helping small&nbsp;businesses figure out what they want (and who they are) and translate that into design.
She holds a Master's degree in Environmental Management from Yale School of The Environment, and a J.D. in environmental law from Pace Law School.&nbsp;
Kate's skillset includes redesigning and updating material to make it easier to understand, building a consistent brand from a simple starting point like a logo, and creating unique logos that guarantee results.
Kate is a Top Rated Upwork Freelancer, and her rates start at $225 per hour. You can find out more about Kate on her <a href="https://www.upwork.com/freelancers/~013ce73876c1c18126" rel="follow noopener" target="_blank">Upwork profile</a>.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>8. Marcos Rezende - UX designer - Canada</h3>
Marcos Rezende is a UX Designer from Ontario, Canada, with more than 13 years of experience. Marcos has worked in over 30 industry sectors for multinational organizations in the United States, Canada, Germany, and Brazil.&nbsp;
Some of Marcos' notable projects include apps for Ontario's COVID-19 dashboard, Urban Master Planning collaboration platform, and Reaction (kid's e-learning app), to name a few.&nbsp;
Marcos loves sharing his industry expertise with aspiring UX designers and regularly writes for the popular UX publication Career Foundry. Total recognizes Marcos as part of its "Top 3%" of global freelancer talent&mdash;a title given to elite freelancers in their given field.
We don't have access to Marcos' rates, but the best UX designers on Upwork earn upwards of $100 per hour. As a Toptal Top 3% freelancer, Marcos likely charges $200-$300 per hour.
<a href="https://www.marcosrezende.com/">Marcos Rezende's website</a> was nominated for the prestigious <a href="https://www.awwwards.com/sites/ux-portfolio-marcos-rezende">awwwards.</a> in 2021.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>9. Tanya Litvinova - UX/UI Designer - United States</h3>
Tanya Litvinova is a freelance UX/UI designer from New York City, United States. She holds a Bachelor of Fine Arts in Advertising Design / Communication Design from the Fashion Institute of Technology.
Tanya specializes in product, mobile, and web design as well as user experience flow, research, and validation.
"I have a passion to make the complex simple, shape behavior, design, plan, and strategize. Aiming for the best user experience, all the while balancing the needs of business and technology to create engaging, habit-forming digital products."
Tanya has worked with Fortune 100 &amp; Fortune 500 companies and successfully delivered business-transforming data-driven analytics, responsive BI dashboards, enterprise web apps, and management systems. Some of Tanya's notable clients include KOCH Industries, BlackRock Financial, BCG Group, and FireEye, to name a few.
<a href="https://www.upwork.com/freelancers/~0165035041b26e96df">Tanya is a Top Rated Upwork Freelancer</a> with more than $200k platform earnings. Her current rate starts at $162.50 per hour.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
<h3>10. Guangming Lang - Data Scientist - United States</h3>
Guangming Lang is a freelance data scientist from Michigan, United States. He holds a Bachelor of Arts in Mathematics from New College of Florida and a Master of Science in Biostatistics from the University of Michigan. Guangming has also completed several Coursera courses in data science and machine learning.
Guangming has been a freelancer since 2013 and has worked across several industries, including fintech, trading, medicine, biotech, advertising, and HR.&nbsp;
Guangming is a Top Rated Upwork Freelancer with over $400k in platform earnings. He's completed 216 jobs on Upwork totaling 3,805 hours! Guangming's current rates start at $200 per hour.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
<h2>Secure Freelancer Workflows With TeamPassword</h2>
No matter how talented or reputable the freelancers and contractors you hire, your company must use secure workflows to protect your digital assets.
Freelancers often need access to shared accounts and tools. Using a <a href="https://app.teampassword.com/dashboard#signup/testimonial">password manager</a> is the first step to securing these accounts and platforms. You can also use a password manager to share credentials with employees, clients, and other stakeholders to ensure you never expose raw passwords via email, spreadsheets, chat apps, and other non-secure methods.
<a href="https://app.teampassword.com/dashboard#signup/testimonial">TeamPassword</a> lets you create groups to share access with only those who need it. When they're done, revoke access with a single click. No need to change passwords every time someone leaves the team.
If you do need to change a password, TeamPassword's built-in <a href="https://teampassword.com/password-generator">password generator</a> lets you create secure passwords between 12-32 characters using numbers, letters (uppercase/lowercase), and symbols.
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;
Ready to onboard clients and freelancers securely with TeamPassword's robust <a href="https://app.teampassword.com/dashboard#signup/testimonial">password management solution</a>? <a href="https://app.teampassword.com/dashboard#signup/testimonial">Sign up for a free trial</a> to secure your company's digital assets today!

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field.

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in ...

10 extremely successful freelancers and what they do

Here are ten successful freelancers and what they do. These freelancers have earned their place as experts in their given field with excellent track records—many have worked with the biggest companies in the world!

Learn what to do if you forgot your Facebook password and how to use TeamPassword to make sure you never forget a password again.

Learn what to do if you forgot your Facebook password and how to use TeamPassword to make sure ...

TeamPassword Blog

Browse our carefully created articles about Information Security, Password Management, Product Information, and Modern Business, all written with your team's safety and success in mind.

Most popular articles

Password Management

June 1, 2021 ∙ 5 min read

Top 5 Dangerous Ways to Store Your Passwords

How to Make a Good Username | Create a Unique and Secure Username

10 extremely successful freelancers and what they do

What To Do If You Forgot Your Old Facebook Login | TeamPassword

Cybersecurity

September 7, 2021 ∙ 7 min read

Who is Mustang Panda and how can you protect yourself?

Cybersecurity

September 7, 2021 ∙ 6 min read

Who is Goblin Panda and how can you protect yourself?

Cybersecurity

September 7, 2021 ∙ 6 min read

Who is Gothic Panda and how can you protect yourself?

Cybersecurity

August 31, 2021 ∙ 7 min read

Who is Energetic Bear and how can you protect yourself?

Cybersecurity

August 31, 2021 ∙ 7 min read

Who is Emissary Panda and How Can You Protect Yourself?

Cybersecurity

August 31, 2021 ∙ 7 min read

Who is Deep Panda and how can you protect yourself?

The Password Manager for Teams

Product

Support

Channels

Legal