Mustang Panda Strikes India and South Korea with Updated LOTUSLITE Backdoor in Espionage Campaign
By Secure Blink
Excerpt
China-linked Mustang Panda targets India banks & S.Korea policy via LOTUSLITE backdoor 22-Apr-2026
4 min read
A China-linked threat group known as Mustang Panda has launched a dual‑faced espionage campaign targeting India’s banking sector and South Korea’s policy circles, according to new research from the Acronis Threat Research Unit (TRU).
The group is deploying an updated version of the LOTUSLITE backdoor (v1.1) that uses legitimate Microsoft‑signed executabl…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by secureblink.com on secureblink.com.
Mentioned in the excerpt
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Animal Farm APT and the Shadow of French IntelligenceInfosec Institute · Published 8 Jul 2015
- Darktrace Malware Analysis: Unpacking SnappyBeeDarktrace · Published 3 Feb
