Malware MINIRECON: Toneshell Variant Backdoor June 29, 2026 ♡Follow0 MINIRECON is a reworked variant of the Toneshell backdoor, beaconing over WebSocket on HTTPS, used by Mustang Panda. Discovered from: Mustang Panda Abuses Zoho WorkDrive as Command Channel in Indian Government Attacks backdoorMINIRECONMustang PandaToneshellWebSocket