Evasive Panda APT Targets DNS to Deploy MgBot

Evasive Panda APT Targets DNS to Deploy MgBot

First seen 24 Dec 2025, 13:03 UTC •Securelist •42.8

Article Content

Browse articles
ThreatCluster

The Evasive Panda APT group has conducted targeted campaigns from November 2022 to November 2024, employing adversary-in-the-middle (AitM) attacks. Their tactics included poisoning DNS requests to deliver the MgBot malware, affecting multiple industries with their sophisticated methods.

Ask AI about this cluster

How this analysis works

Extracted Entities

1 / 2