A question - EUA-29 threat actor group likely linked to Mustang Panda, targeted European countries

[MariaRusanova]

Hello All and @adulau ,

Based on today's load and activities from our side I see in one of the reports a group mentioned for the first time.

EUA-29 (Chinese threat actor cluster group)

Some of the analysis and links points to similarities of this group to the already known Chinese affiliated group - Mustang Panda.

At this moment I can't find anything public and visible for this group with such name. I see it only in one of our reports with is amber+strict

Can you tell me what is your opinion in this case? If this TA can be created if there is available information for them.

At this moment I can see only that they are a part of a spearphishing campaign using as lures an official EU meeting and a NATO meeting document.

Tell me if you heard something for them? If to be added (if possible).
If there is no enough information for them, I can use Mustang Panda as a relation because of known similarities between them.

[adulau]

I would create a relationship between the two clusters and use a specific tag to explain the estimation of relationship.