The renowned Chinese hacker group, Mustang Panda, has recently been executing cyber attacks against maritime organizations in at least seven EU countries. This information was published in the annual report of the European Union Agency for Cybersecurity (ENISA) and indicates a serious threat to cybersecurity in this sector.
Ongoing Attacks and Impact Scope
ENISA has stated in its report that the Mustang Panda group has been continuously attacking these organizations, and these attacks include espionage campaigns and strategic information gathering. This group is recognized as a significant threat to EU organizations due to its advanced capabilities and its ability to carry out repeated attacks against the maritime sector and public administrative organizations.
This hacker group also targeted EU diplomatic entities in 2022 and was recognized as a key threat in 2023. Additionally, it was revealed in 2025 that this group had been spying on Russian defense and aerospace companies.
Vulnerability of Maritime Industries
The maritime transport industry is particularly vulnerable to cyber attacks, and such attacks can have major impacts on global trade. China has previously shown interest in how Western shipping companies operate, especially as maritime routes in the Middle East become increasingly difficult.
In previous reports, ENISA has categorized maritime industries as "high-risk areas." In its recent report, the agency concluded that "cyber attacks on transport, including maritime and logistics, are especially significant in terms of economic and political considerations, particularly in the context of geopolitical developments."
Given the increasing cyber threats from hacker groups like Mustang Panda, European organizations must strengthen their cybersecurity measures and respond appropriately to these threats. These attacks not only pose risks to national security but can also impact global supply chains and trade.
