Sangfor

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 15, 2026
Last mentionedAug 16, 2026

Timeline

2 articles · newest first

Mustang Panda Upgrades CoolClient With a Kernel Rootkit

Mustang Panda's updated CoolClient backdoor deploys a signed kernel driver to hide processes, files and network activity in Asian intrusions.

Security AffairsAug 16, 17:18 UTC · Aug 16, 2026Threat actorExploited4 · 1 read

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

Kaspersky reports Mustang Panda's updated CoolClient backdoor now deploys a signed kernel-mode Windows rootkit, hitting government victims in Myanmar, Mongolia, Pakistan, and Russia.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Threat actorExploited3

Appears with

CoolClientproduct · 2
PlugXmalware · 2
Mustang Pandathreat actor · 2
HoneyMytethreat actor · 2
Kasperskyvendor · 2
Microsoft Defenderproduct · 2
ToneShellmalware · 1
CoolClientmalware · 1
360 Total Securityproduct · 1
PlugXproduct · 1
Sophosorganization · 1
Nanjing Ranyi Technology Co., Ltd.organization · 1
Trend Microorganization · 1

Entities are extracted by the model from each article. First seen Aug 15, 2026, last mentioned Aug 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.