Evasive Panda APT Using AitM Attack and DNS Poisoning to Deliver Malware

Cybersecuritynews •Tushar Subhra Dutta • December 24, 2025

The Evasive Panda APT group, also known as Bronze Highland, Daggerfly, and StormBamboo, has been running targeted campaigns since November 2022, using advanced techniques to deliver the MgBot malware. The group employs adversary-in-the-middle attacks combined with DNS poisoning to compromise specific victims across multiple industries. Recent findings show that these operations continued until November 2024, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Evasive Panda APT Delivers MgBot Malware via AitM and DNS Poisoning The Evasive Panda APT group, also known as Bronze Highland, has been conducting targeted campaigns since November 2022, utilizing adversary-in-the-middle (AitM) attacks and DNS poisoning to deliver the MgBot malware. These operations have affected multiple industries and continued until November 2024. 3 sources 44

Extracted Entities

Evasive Panda APT Using AitM Attack and DNS Poisoning to Deliver Malware

The full story

Extracted Entities

APT Groups (4)

Attack Types (2)

Malware (1)