Straitstimes

Chinese Hackers Target US Officials with Venezuelan Phishing Campaign

First seen 15 Jan 2026, 19:53 UTC • Acronis

+4 •22.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A Chinese-linked cyberespionage group, known as 'Mustang Panda', targeted US government and policy officials using Venezuela-themed phishing emails. This campaign occurred shortly after the US operation to topple former Venezuelan president Nicolas Maduro, as reported by cybersecurity researchers on January 15, 2026.

How this analysis works

Attack Flow

11 entities, 22 inferred relationships (STIX 2.1).

Threat Actor (3)

Mustang Panda
Twill Typhoon
Unc6384

Technique (5)

Malware
Phishing
DLL Sideloading
DLL Side-loading
T1566 - Phishing

Malware (2)

Lotuslite
PlugX

Affected Platform (1)

Windows

Relationships

Mustang Panda uses Lotuslite
Mustang Panda uses PlugX
Twill Typhoon uses Lotuslite
Twill Typhoon uses PlugX
Unc6384 uses Lotuslite
Unc6384 uses PlugX
Mustang Panda uses Malware
Mustang Panda uses Phishing
Mustang Panda uses DLL Sideloading
Mustang Panda uses DLL Side-loading
Mustang Panda uses T1566 - Phishing
Twill Typhoon uses Malware
Twill Typhoon uses Phishing
Twill Typhoon uses DLL Sideloading
Twill Typhoon uses DLL Side-loading
Twill Typhoon uses T1566 - Phishing
Unc6384 uses Malware
Unc6384 uses Phishing
Unc6384 uses DLL Sideloading
Unc6384 uses DLL Side-loading
Unc6384 uses T1566 - Phishing
Mustang Panda related to Windows

Continue Reading

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions FamousSparrow APT Expands Targeting to Azerbaijani Energy Sector QuickFox VPN Supply Chain Attack Delivers FDMTP Backdoor to Windows Users TA416 Resumes Cyber Espionage Against European Governments Amid Geopolitical Tensions Mustang Panda Launches PlugX RAT Campaign via Fake Browser Update China-nexus Threat Actor Deploys PlugX in Persian Gulf Amid Middle East Conflict

Chinese Hackers Target US Officials with Venezuelan Phishing Campaign

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading