Mustang Panda Unleashes New Cyber Espionage Tactics: Worms, Fake USBs, and Sneaky Malware
Mustang Panda, a China-based cyber espionage group, has upgraded its tactics with new malware FDMTP and PTSOCKET. Using a variant of the HIUPAN worm, they spread PUBLOAD malware via infected removable drives, targeting government and non-government entities, particularly in the Asia-Pacific region.
Hot Take:
Remember when Panda was just a cute, bamboo-munching creature? Well, meet Mustang Panda, the state-sponsored cyber ninja whose hobbies include espionage, malware shenanigans, and making our digital lives a nightmare. Not so cuddly now, huh?
Key Points:
- Mustang Panda is a Chinese state-backed cyber espionage group.
- They’ve switched tactics to using new malware called FDMTP and PTSOCKET.
- HIUPAN worm variant is used to deliver PUBLOAD malware via removable drives.
- Recent campaigns involved spear-phishing and malware like DOWNBAIT, PULLBAIT, and CBROVER.
- Document exfiltration through PUBLOAD or PTSOCKET, and possibly via Microsoft OneDrive abuse.
Already a member? Log in here