ToneShell Backdoor
ToneShell is a backdoor used by Mustang Panda, previously associated with a kernel-mode rootkit disclosed in December 2025. It is used for…
Tag: Mustang Panda
LOTUSLITE: Backdoor Malware
LOTUSLITE is a backdoor used by Mustang Panda in attacks on India's banking sector and South Korean policy circles, staged through legitimate…
Mustang Panda Uses Zoho WorkDrive as Command Channel
Mustang Panda used Zoho WorkDrive as a command and control channel in attacks on Indian government entities.