Back Varindia

China-Linked Evasive Panda Uses DNS Poisoning to Deploy MgBot Malware

Varindia • January 1, 2026

Share: View original

A China-linked advanced persistent threat (APT) group known as Evasive ... threats. er. See What's in Tech With the Fast Forward ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Evasive Panda APT Uses DNS Poisoning to Deploy MgBot Malware in Targeted Attacks The China-linked APT group Evasive Panda has conducted cyber-espionage campaigns using DNS poisoning to install the MgBot backdoor. Targeted victims include entities in Türkiye, China, and India. Kaspersky researchers have identified this group, also known by several other names, as responsible for these attacks. 3 sources 52

Extracted Entities

APT Groups (1)

Attack Types (1)

Countries (1)

Malware (1)

MITRE ATT&CK (1)