Mustang Panda is a China-nexus advanced persistent threat (APT) group known for cyber espionage campaigns targeting government and military organizations across Asia and Europe. It frequently uses backdoors like PlugX and COOLCLIENT, often delivered via spear-phishing and DLL sideloading.