Hurricane Panda is a persistent, state-sponsored cyber espionage group originating from China, first observed conducting intrusions in 2013. The group's primary objective is information theft and intelligence gathering, specifically targeting technology and telecommunications sectors globally. What distinguishes Hurricane Panda is its notable practice of using free DNS services from Hurricane Electric to redirect command and control traffic, and its capability to exploit zero-day vulnerabilities for extended periods, as demonstrated by their use of CVE-2014-4113 for at least five months before public disclosure. They are also known for their determination to regain access to compromised networks after initial eviction attempts.