
Chinese Mustang Panda Hackers Enhance CoolClient Backdoor with Credential Theft Capabilities
cybersecuritycyberespionagemalwaredatathefthackingAPTChina
The Chinese cyberespionage group Mustang Panda has updated its CoolClient backdoor with a new variant capable of stealing browser login data and monitoring the clipboard. This evolution of the malicious tool represents an enhancement of the group's data exfiltration capabilities, which traditionally targets government organizations and businesses. The new variant retains the core functionalities of CoolClient while adding these credential theft capabilities.