Office of Public Affairs | Justice Department and FBI Conduct ...
1 day ago · As described in court documents unsealed in the Eastern District of Pennsylvania, a group of hackers sponsored by the People’s Republic of China (PRC), known to the private sector as “Mustang Panda” and “Twill Typhoon,” used a version of PlugX malware to infect, control, and steal information from victim computers.
DOJ confirms FBI operation that mass-deleted Chinese malware …
1 day ago · The Department of Justice and the FBI said on Tuesday that they had successfully deleted the malware planted by the China-backed hacking group, known as “Twill Typhoon” or “Mustang Panda ...
FBI deletes Chinese PlugX malware from thousands of US …
14 hours ago · The malware, controlled by the Chinese cyber espionage group Mustang Panda (also tracked as Twill Typhoon), infected thousands of systems using a PlugX variant with a wormable component that ...
FBI forces Chinese malware to delete itself from thousands of US ...
23 hours ago · The People's Republic of China (PRC) government paid the Mustang Panda group to develop a version of PlugX malware used to infect, control, and steal information from victim computers, the FBI said.
DoJ remotely cleaned thousands of computers infected with Chinese malware
1 day ago · Sekoia.io has found PlugX malware in more than 170 countries. The Mustang Panda group has been conducting infiltration efforts around the world since at least 2014.
US removes malware allegedly planted on computers by Chinese …
1 day ago · Investigators said the malware was installed via infected USB devices by a band of hackers who are known by the names "Mustang Panda" and "Twill Typhoon." News Today's news
Mustang Panda - MITRE ATT&CK®
Apr 12, 2021 · Mustang Panda is a China-based cyber espionage threat actor that was first observed in 2017 but may have been conducting operations since at least 2014. Mustang Panda has targeted government entities, nonprofits, religious, and other non-governmental organizations in the U.S., Europe, Mongolia, Myanmar, Pakistan, and Vietnam, among others.
Mustang Panda deploys a new wave of malware targeting Europe
May 5, 2022 · Mustang Panda's recent activity targets European entities, including Russian targets, and uses political themes to deliver the PlugX family of malware implants. Typical infection chains employed by Mustang Panda consist of three key components: Benign executable: Used to side-load a malicious DLL.
MUSTANG PANDA (Threat Actor) - Fraunhofer
Recently, Falcon Intelligence observed new activity from MUSTANG PANDA, using a unique infection chain to target likely Mongolia-based victims. This newly observed activity uses a series of redirections and fileless, malicious implementations of legitimate tools to gain access to the targeted systems.
Mustang Panda Uses the Russian-Ukrainian War to Attack
Dec 6, 2022 · APT group Mustang Panda now appears to have Europe and Asia Pacific targets in its sights. The BlackBerry Research and Intelligence team recently unearthed evidence that the group may be using global interest in the Russian-Ukraine war to deliver PlugX malware via phishing lure to unsuspecting users.