The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode rootkit that can hide and protect malicious processes, files, registry objects, and command-and-control (C2) network information.

Russian cybersecurity vendor Kaspersky said it identified victims in Myanmar, Mongolia, Pakistan,



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/08/mustang-panda-adds-signed-windows.html