Analysis defensemaritime
APT40: China's Maritime Espionage Machine and Its Playbook for 2026
APT40 — also tracked as Kryptonite Panda, TEMP.Periscope, and Bronze Mohawk — has operated as China's principal cyber instrument for maritime and naval intelligence collection for over a decade. A joint CISA-FBI-ASD-NCSC advisory confirmed ties to Hainan's State Security Bureau. Here's what the group does, how it works, and why its rapid CVE exploitation model is more relevant than ever.