Mustang Panda Deploys Signed Windows Rootkit in Updated CoolClient Backdoor
Mustang Panda (aka HoneyMyte) has been observed deploying an updated version of the CoolClient backdoor that includes a signed Windows kernel-mode rootkit,…
Tag: Nanjing Ranyi Technology Co., Ltd.
Nanjing Ranyi Technology Co., Ltd.
Nanjing Ranyi Technology Co., Ltd. is a Chinese company whose digital certificate was used to sign the malicious msagent.sys driver. The certificate…