IBM X-ForcePublished
Trapping a Mustang Panda
Excerpt
Trapping a Mustang Panda | IBM
By Agnes Ramos-Beauchamp, Joshua Chung, Golo Mühr, Joe Fasulo
As of mid-2026, IBM X-Force continues to monitor cyber campaigns conducted by ITG27, a China-aligned state-sponsored espionage group whose victims align with China’s regional strategic interests. In collaboration with Deception.Pro, X-Force captured live ITG27 activity in simulated enterprise environments, including the deployment of a previously undiscovered VNC-capable backdoor named Havencode.
The observed activity extends a campaign previously reported by Acronis, where ITG27 targeted India’s energy sector and government organizations. This campaign relied on the use of…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by IBM X-Force on ibm.com.
Mentioned in the excerpt
More from IBM X-Force5
- more_eggs-anyone-threat-actor-itg08-strikes-againIBM X-Force · Added 19 Oct
- What is Asymmetric Encryption?IBM X-Force · Published 8 Aug 2024
- IBM X-Force Discovers New Sheriff Backdoor used to target UkraineIBM X-Force · Published 9 Apr 2025
- New Destructive Wiper ZeroCleare Targets Energy Sector in the Middle EastIBM X-Force · Published 4 Dec 2019
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claimseweek.com · Published 6 Apr 2017
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
