Malware
TONESHELL
- First Reported
- Sep 3, 2024
- Latest Reported
- Jun 28, 2026
Reported Context (3)
- The campaigns showcase new additions to Mustang Panda's malware arsenal while incorporating code overlaps with previously documented tooling, including TONESHELL. Mustang Panda Campaigns Target Indian Government and Energy Sectors With New Malware
- ToneShell Backdoor Used to Target Attendees of the IISS Defence Summit Hunt.io Recaps 2024 Threat-Hunting Tools and Cyber Threat Research
- The ToneShell backdoor, frequently associated with Mustang Panda (also known as Stately Taurus and Earth Preta, among other monikers), has been consistently deployed against government organizations, mainly in Southeast ToneShell Malware Targets IISS Defence Summit Attendees in Suspected Espionage Campaign
Malware (9)
People (3)
Threat Actors (7)
MITRE ATT&CK (13)
Vendors (3)
Products (15)
Industries (5)
Countries (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.