New MQsTTang Backdoor from Mustang Panda Targets Political and Governmental Organizations

Threat Level – Red | Vulnerability Report
Download PDF

A new custom backdoor called MQsTTang, which they attribute to the Mustang Panda APT group. This backdoor is part of an ongoing campaign that began in early January 2023, and it appears to be targeting political and governmental organizations in Taiwan, Australia, Europe, and Asia. Unlike most of the group’s malware, MQsTTang doesn’t seem to be based on existing families or publicly available projects.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox