+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks (/showthread.php?tid=6319205)
Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks - Stanley - Feb 5, 2026
Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks
Threat actors with ties to China have been observed using an updated version of a backdoor called COOLCLIENT in cyber espionage attacks in 2025 to facilitate comprehensive data theft from infected endpoints.
The activity has been attributed to Mustang Panda (aka Earth Preta, Fireant, HoneyMyte, Polaris, and Twill Typhoon) with the intrusions primarily directed against government entities located
https://thehackernews.com/2026/01/mustang-panda-deploys-updated.html
RE: Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks - The Pact - Feb 5, 2026
These attacks primarily targeted government entities in Myanmar, Mongolia, Malaysia, and Russia, reflecting the group’s continued evolution toward deeper surveillance and more sophisticated data‑exfiltration campaigns.