Mustang Panda is a China-linked espionage group targeting governments, NGOs and organisations across South-East Asia, Europe and beyond.

Key facts

• Known for spear-phishing and the PlugX remote-access trojan.
• Uses USB-spreading malware to reach air-gapped or segmented networks.
• Targets diplomatic entities, NGOs and government bodies aligned with Chinese strategic interests.
• Frequently themes lures around geopolitical events.

Why it matters

Mustang Panda relies on social engineering and credential theft. Detecting exposed staff credentials early helps blunt their phishing-led intrusions.

How DarkThreatX helps

DarkThreatX tracks threat-actor activity, leaked credentials and exposed data across the dark web so security teams can act on early warning. Run a free dark web scan or explore the platform.