Mustang Panda Deploys Signed Windows Rootkit in Updated CoolClient Backdoor
Mustang Panda (aka HoneyMyte) has been observed deploying an updated version of the CoolClient backdoor that includes a signed Windows kernel-mode rootkit,…
Tag: CoolClient
CoolClient Backdoor Analysis
CoolClient is a modular backdoor used by Mustang Panda. It supports keylogging, clipboard theft, credential harvesting, file management, and system reconnaissance. The…
Mustang Panda (HoneyMyte) Threat Actor Profile
Mustang Panda, also known as HoneyMyte, is a China-linked advanced persistent threat (APT) group active since at least 2013. It primarily targets…