Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor 2025-12-30 at 11:43 By The Chinese hacking group known as Mustang Panda has leveraged a previously undocumented kernel-mode rootkit driver to deliver a new variant of backdoor dubbed TONESHELL in a cyber attack detected in mid-2025 targeting an unspecified entity in Asia. The findings come […]
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor Read More »