The China-linked Mustang Panda APT has been using a kernel-mode rootkit in attacks leading to ToneShell backdoor deployments.
Mustang Panda deployed TONESHELL via a signed kernel-mode rootkit, targeting Asian government networks and evading security ...
A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.
2025 included a number of monumental threats, from global nation-state attacks to a critical vulnerability under widespread ...
Kaspersky has released new research findings on a sophisticated cyber espionage campaign by the Evasive Panda threat actor.
China-linked Evasive Panda is abusing DNS techniques to hide malware traffic, raising new concerns for governments and ...
China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback