TONESHELL is a backdoor associated with China-nexus threat actors, notable for its kernel-mode driver enhancements that improve stealth and persistence. It has been referenced in connection with Mustang Panda's evolving toolset.
TONESHELL is a backdoor associated with China-nexus threat actors, notable for its kernel-mode driver enhancements that improve stealth and persistence. It has been referenced in connection with Mustang Panda's evolving toolset.