Go offline with the Player FM app!
Pandas with a purpose.
Manage episode 484482685 series 2881647
This week, we are joined by Deepen Desai, Zscaler's Chief Security Officer and EVP of Cyber and AI Engineering, taking a dive deep into Mustang Panda’s latest campaign. Zscaler ThreatLabz uncovered new tools used by Mustang Panda, including the backdoors TONEINS, TONESHELL, PUBLOAD, and the proxy tool StarLoader, all delivered via phishing.
They also discovered two custom keyloggers, PAKLOG and CorKLOG, and an EDR evasion tool, SplatCloak, highlighting the group's focus on surveillance, persistence, and stealth in cyberespionage operations.4o.
The research can be found here:
- Latest Mustang Panda Arsenal: ToneShell and StarProxy | P1
- Latest Mustang Panda Arsenal: PAKLOG, CorKLOG, and SplatCloak | P2
Learn more about your ad choices. Visit megaphone.fm/adchoices
397 episodes
Manage episode 484482685 series 2881647
This week, we are joined by Deepen Desai, Zscaler's Chief Security Officer and EVP of Cyber and AI Engineering, taking a dive deep into Mustang Panda’s latest campaign. Zscaler ThreatLabz uncovered new tools used by Mustang Panda, including the backdoors TONEINS, TONESHELL, PUBLOAD, and the proxy tool StarLoader, all delivered via phishing.
They also discovered two custom keyloggers, PAKLOG and CorKLOG, and an EDR evasion tool, SplatCloak, highlighting the group's focus on surveillance, persistence, and stealth in cyberespionage operations.4o.
The research can be found here:
- Latest Mustang Panda Arsenal: ToneShell and StarProxy | P1
- Latest Mustang Panda Arsenal: PAKLOG, CorKLOG, and SplatCloak | P2
Learn more about your ad choices. Visit megaphone.fm/adchoices
397 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.