ThreatCluster

Chinese Hackers Deploy Rootkit to Conceal ToneShell Malware in Southeast Asia

First seen 30 Dec 2025, 16:16 UTC •RedditGbhackersCybersecuritynews •95% similarity •47

Article Content

Browse articles
ThreatCluster

A Chinese-linked threat group, associated with HoneyMyte, is utilizing a new kernel rootkit to obscure its ToneShell backdoor. This cyber campaign has primarily targeted government networks in Southeast and East Asia, with significant effects noted in Myanmar and Thailand, focusing on long-term espionage rather than immediate financial gain.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Bronze President HoneyMyte Mustang Panda ToneShell Government Malware