APT24

🇨🇳China-attributed

campaigns

aliases

Last seen:Mar 17, 2026

Intelligence Profile

The Pitty Tiger group has been active since at least 2011. They have been seen using HeartBleed vulnerability in order to directly get valid credentials

Threat Analysis

APT24 is a known-sophistication threat actor attributed to China, engaged in cyber operations with a primary motivation of unknown activity patterns.

Known Campaigns

APT24 — Active Operations March 2026

APT24 is a unknown-motivation threat actor attributed to China. The Pitty Tiger group has been active since at least 2011. They have been seen using HeartBleed vulnerability in order to directly get valid credentials...

ACTIVEMEDIUM2026

External References

→http://blog.airbuscybersecurity.com/post/2014/07/The-Eye-of-the-Tiger2

→http://blog.cassidiancybersecurity.com/post/2014/07/The-Eye-of-the-Tiger2

→https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2014/2014.07.11.Pitty_Tiger/Pitty_Tiger_Final_Report.pdf

→https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/targeted-attacks-on-french-company-exploit-multiple-word-vulnerabilities/

→https://www.fireeye.com/blog/threat-research/2014/07/spy-of-the-tiger.html

→https://attack.mitre.org/groups/G0011

→https://www.mandiant.com/resources/insights/apt-groups

Quick Facts

TypeAPT / Threat Group

Origin🇨🇳 China

Aliases4

SourceMalpedia

Also Known As

G0011Temp.PittytigerAPT24PITTY PANDA

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search APT24