Evasive Panda exploits network trust using adversary in the middle attacks and DNS poisoning

Cyberpress • December 24, 2025

Share: View original

Evasive Panda adversary - The China-linked advanced persistent threat (APT) group Evasive Panda, also tracked as Bronze Highland, Daggerfly.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Evasive Panda APT Delivers MgBot Malware via AitM and DNS Poisoning The Evasive Panda APT group, also known as Bronze Highland, has been conducting targeted campaigns since November 2022, utilizing adversary-in-the-middle (AitM) attacks and DNS poisoning to deliver the MgBot malware. These operations have affected multiple industries and continued until November 2024. 3 sources 44

Extracted Entities

APT Groups (3)

Bronze Highland Daggerfly Evasive Panda

Attack Types (1)

Man-in-the-Middle