Straitstimes

Chinese Hackers Target US Officials with Venezuelan Phishing Campaign

First seen 15 Jan 2026, 19:53 UTC • •22.3

Article Content

1 / 12

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

A Chinese-linked cyberespionage group, known as 'Mustang Panda', targeted US government and policy officials using Venezuela-themed phishing emails. This campaign occurred shortly after the US operation to topple former Venezuelan president Nicolas Maduro, as reported by cybersecurity researchers on January 15, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 241d ago How this analysis works

Threat Graph

7 entities, 12 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Threat Actor (3)

Mustang Panda
Twill Typhoon
UNC6384

Technique (3)

Malware
Phishing
T1566 - Phishing

Malware (1)

Lotuslite

Relationships

Mustang Panda uses Lotuslite
Twill Typhoon uses Lotuslite
UNC6384 uses Lotuslite
Mustang Panda uses Malware
Mustang Panda uses Phishing
Mustang Panda uses T1566 - Phishing
Twill Typhoon uses Malware
Twill Typhoon uses Phishing
Twill Typhoon uses T1566 - Phishing
UNC6384 uses Malware
UNC6384 uses Phishing
UNC6384 uses T1566 - Phishing

Following this threat?

Track Mustang Panda and Lotuslite in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Chinese Hackers Target US Officials with Venezuelan Phishing Campaign

Article Content

More articles in this cluster (11)

Threat Graph

Following this threat?

Extracted Entities (11)

APT Groups (3)

Attack Types (2)

Countries (3)

Industries (1)

Malware (1)

MITRE ATT&CK (1)