ThreatCluster

Malware Campaigns Target U.S. Manufacturing and Healthcare via DNS Poisoning

First seen 4 Jan 2026, 15:39 UTC •Securityaffairs.Co •98% similarity •30

Article Content

Browse articles
ThreatCluster

APT group Evasive Panda is using DNS poisoning to deliver MgBot malware, targeting U.S. and allied manufacturing and healthcare organizations. Additionally, a spearphishing campaign is exploiting the npm registry to compromise these sectors. The EmEditor supply chain incident has also been disclosed, revealing the distribution of information-stealing malware.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →