CyberSecurityBoardThreat Intel · CVEs · Products

Tag: Toneshell

Malware

MINIRECON: Toneshell Variant Backdoor

MINIRECON is a reworked variant of the Toneshell backdoor, beaconing over WebSocket on HTTPS, used by Mustang Panda.

backdoor MINIRECON Mustang Panda Toneshell
June 29, 2026
Malware

TONESHELL: Kernel-Mode Enhanced Backdoor

TONESHELL is a backdoor associated with China-nexus threat actors, notable for its kernel-mode driver enhancements that improve stealth and persistence. It has…

backdoor China kernel-mode stealth
June 29, 2026