Mustang Panda APT Group Targets Europe With PlugX Backdoor
Mustang Panda distributed PlugX malware through malicious optical disc image (ISO) files to entities in Europe.
The threat actor leveraged malicious shortcut (LNK) files and dynamic-link library (DLL) search-order-hijacking to carry out the four-stage infection chain.
Microsoft Windows registry run keys were used for persistence while symmetric cryptography and standard encoding were used to exfiltrate sensitive data.
Featured Resources
blog
Exploiting BadSuccessor: Cymulate Launches New Advanced Breach Simulation Scenario
At Cymulate, our mission is to stay ahead of evolving threats by transforming cutting-edge research into real-world security testing tools.
blog
11 Email Threats Your Organization Needs to Know
Email remains the primary entry point for cyberattacks. From nation-state actors to low-level cybercriminals, adversaries continually exploit the ubiquity and
blog
Proactive Security in Action: What Real-World Gaps Reveal About Cyber Resilience
Today’s threat actors move fast, and reactive security is no longer enough. Most breaches have a common root cause: a