Threat Actor
Mustang Panda
- First Reported
- Sep 3, 2024
- Latest Reported
- Oct 11, 2026
Reported Context (8)
- Listed among China-aligned actors represented in observed APT campaigns. CYFIRMA Report Finds Sustained Cyber Threats Across Government and Civic Organizations
- Listed as a China-aligned nation-state espionage group targeting India's Government and Defence ecosystem. CYFIRMA Report: Persistent Espionage and Identity Attacks Target India’s Government and Defence Sector
- Acronis TRU attributed the campaigns to Mustang Panda with high confidence; the article reports targeting of Indian government entities and the hydropower sector. Mustang Panda Campaigns Target Indian Government and Energy Sectors With New Malware
- ThreatLabz assessed with medium confidence that the activity may be linked to Mustang Panda. China-Nexus Actor Targets Arabian Gulf with Obfuscated PlugX Campaign
- The article describes this group using the FTPlnk_phishing tool and reports a Thai police-targeting attack using a related LNK file. UnsolicitedBooker-Linked Campaigns Target Telecoms in Kyrgyzstan and Tajikistan
Malware (26)
People (6)
Threat Actors (48)
MITRE ATT&CK (21)
Vendors (11)
Products (38)
Tools (9)
Industries (14)
Countries (52)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.