Evasive Panda APT Targets DNS to Deploy MgBot

Evasive Panda APT Targets DNS to Deploy MgBot

First seen 24 Dec 2025, 13:03 UTC •Securelist •0% similarity •42.8

Article Content

Browse articles
ThreatCluster

The Evasive Panda APT group has conducted targeted campaigns from November 2022 to November 2024, employing adversary-in-the-middle (AitM) attacks. Their tactics included poisoning DNS requests to deliver the MgBot malware, affecting multiple industries with their sophisticated methods.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →