iQIYI is a Chinese online video platform and streaming service.
iQIYI is a Chinese online video platform and streaming service. A recent campaign attributed to the Evasive Panda APT used DNS poisoning to deliver MgBot to iQIYI, highlighting the actor's ability to leverage DNS manipulation to deploy malware against high-profile media platforms and the ongoing risk of APT activity targeting such services.
The Evasive Panda APT group has conducted targeted campaigns from November 2022 to November 2024, employing adversary-in-the-middle (AitM) attacks. Their tactics included poisoning DNS requests to deliver the MgBot…