Loading ATT&CK
Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice
Mustang Panda is a China-based cyber espionage threat actor that has been conducting operations since at least 2012. Mustang Panda has been known to use tailored phishing lures and decoy documents to deliver malicious payloads. Mustang Panda has targeted government, diplomatic, and non-governmental organizations, including think tanks, religious institutions, and research entities, across the United States, Europe, and Asia, with notable activity in Russia, Mongolia, Myanmar, Pakistan, and Vietnam. (Citation: BlackBerry MUSTANG PANDA October 2022) (Citation: Eset PlugX Korplug Mustang Panda March 2022) (Citation: Anomali MUSTANG PANDA October 2019) (Citation: Cisco Talos MUSTANG PANDA PLUGX PUBLOAD MAY 2022) (Citation: Secureworks BRONZE PRESIDENT December 2019) (Citation: DOJ Affidavit Search and Seizure PlugX December 2024) (Citation: EclecticIQ Mustang Panda PlugX) (Citation: ATTACKIQ MUSTANG PANDA TONESHELL March 2023) (Citation: Crowdstrike MUSTANG PANDA June 2018) (Citation: Palo Alto Networks, Unit 42) (Citation: Sophos PlugX September 2022) (Citation: Sophos Mustang Panda PLUGX) (Citation: Zscaler)
This kind of object does not name platforms.
Only techniques sit in a kill chain phase.
| Direction | Type | Related object |
|---|---|---|