Related Threat Clusters
-
TA416 Resumes Cyber Espionage Against European Governments Amid Geopolitical Tensions
Chinese state-backed group TA416 has reemerged with intensified cyber espionage campaigns targeting European governments, following a quiet period since 2023. Proofpoint reported that the group's renewed activity began…
9 articles · Updated April 1, 2026 -
Chinese APT Campaign Targets Asia-Pacific with FDMTP Backdoor
A months-long espionage campaign linked to the Chinese group Mustang Panda has been identified, utilizing an updated variant of the FDMTP backdoor. This campaign, tracked by Darktrace, began in late September 2025 and…
3 articles · Updated May 14, 2026 -
Critical Symantec DLP Agent Vulnerability Enables Privilege Escalation
A high-severity vulnerability, tracked as CVE-2026-3991, has been identified in the Symantec Data Loss Prevention (DLP) Agent for Windows. Discovered by security researcher Manuel Feifel, this flaw allows low-privileged…
3 articles · Updated April 2, 2026 -
Mustang Panda Targets Indian Banking Sector Amid Geopolitical Tensions
Mustang Panda, a Chinese APT group, has shifted its focus to India's banking sector, utilizing the LOTUSLITE backdoor in recent campaigns. This activity, observed in March 2026, diverges from its typical targets, which…
4 articles · Updated April 21, 2026
Recent Intelligence Reports
- Mustang Panda Linked to Updated FDMTP Backdoor in Asia — Infosecurity-Magazine · May 14, 2026
- Mustang Panda linked New LOTUSLITE malware now targets Indian banks: Report — News9Live · April 22, 2026
- Chinese APT Targets Indian Banks, Korean Policy Circles — Darkreading · April 21, 2026
- TA416 Expands Espionage Operations Across Europe With Web Bug Recon and Malware Delivery — Cybersecuritynews · April 2, 2026
- TA416 Broadens Europe Spy Campaign With Web Bugs and Malware — Gbhackers · April 2, 2026
- Symantec DLP Agent Flaw Exposed Systems to Privilege Escalation Attacks — Gbhackers · April 2, 2026
- I’d come running back to EU again: TA416 resumes European government espionage campaigns — Proofpoint · April 1, 2026
- European — Cyberscoop · April 1, 2026