{ads}

Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor



December 30, 2025 at 02:05PM

The Chinese hacking group known as Mustang Panda has leveraged a previously undocumented kernel-mode rootkit driver to deliver a new variant of backdoor dubbed TONESHELL in a cyber attack detected in mid-2025 targeting an unspecified entity in Asia. The findings come from Kaspersky, which observed the new backdoor variant in cyber espionage campaigns mounted by the hacking group targeting

from The Hacker News https://ift.tt/XpjNhb7

0 Response to "Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor"

Post a Comment

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads