[SecList]The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

[igor51]

The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

Kaspersky discloses a 2025 HoneyMyte (aka Mustang Panda or Bronze President) APT campaign, which uses a kernel-mode rootkit to deliver and protect a ToneShell backdoor.
Source: The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor