Mustang Panda Unleashes New Cyber Espionage Tactics: Worms, Fake USBs, and Sneaky Malware

Mustang Panda, a China-based cyber espionage group, has upgraded its tactics with new malware FDMTP and PTSOCKET. Using a variant of the HIUPAN worm, they spread PUBLOAD malware via infected removable drives, targeting government and non-government entities, particularly in the Asia-Pacific region.

Hot Take:

Remember when Panda was just a cute, bamboo-munching creature? Well, meet Mustang Panda, the state-sponsored cyber ninja whose hobbies include espionage, malware shenanigans, and making our digital lives a nightmare. Not so cuddly now, huh?

Key Points:

  • Mustang Panda is a Chinese state-backed cyber espionage group.
  • They’ve switched tactics to using new malware called FDMTP and PTSOCKET.
  • HIUPAN worm variant is used to deliver PUBLOAD malware via removable drives.
  • Recent campaigns involved spear-phishing and malware like DOWNBAIT, PULLBAIT, and CBROVER.
  • Document exfiltration through PUBLOAD or PTSOCKET, and possibly via Microsoft OneDrive abuse.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here