Pandora (320b0784-4f0f-46ea-99e9-c34bfcca1c2e)

Pandora is a multistage kernel rootkit with backdoor functionality that has been in use by Threat Group-3390 since at least 2020.^{[Trend Micro Iron Tiger April 2021]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Threat Group-3390 (79be2f31-5626-425e-844c-fd9c99e38fe5)	Tidal Groups	Pandora (320b0784-4f0f-46ea-99e9-c34bfcca1c2e)	Tidal Software	1
Pandora (320b0784-4f0f-46ea-99e9-c34bfcca1c2e)	Tidal Software	Cinnamon Tempest (8e059c6b-d278-5454-a234-a8ad69feb66c)	Tidal Groups	1