TA428

TA428 is a cyber espionage group of Chinese origin that first emerged in 2013, though it was formally identified and named by Proofpoint researchers in 2019. The group's primary motivation is information theft and espionage, focusing on targets of strategic value to China. What sets TA428 apart is its consistent engagement in long-term, strategic intrusions against government agencies, critical infrastructure, and defense organizations predominantly across the Asia-Pacific region and Eastern Europe. The group demonstrates operational overlaps and collaborations with other China-linked threat groups and is also tracked under aliases such as Panda and ThunderCats.