⤷ Title: HoneyMyte’s CoolClient Backdoor Adds Signed Kernel Rootkit Driver
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:06:52 +0000
════════════════════════
⌗ Tags: #Malware #CoolClient #DLL Sideloading #HoneyMyte #Kernel Driver #Mustang Panda #PlugX #rootkit
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:06:52 +0000
════════════════════════
⌗ Tags: #Malware #CoolClient #DLL Sideloading #HoneyMyte #Kernel Driver #Mustang Panda #PlugX #rootkit
Information Security News
HoneyMyte’s CoolClient Backdoor Adds Signed Kernel Rootkit Driver
The threat group HoneyMyte, also tracked as Mustang Panda, has begun deploying an updated version of its CoolClient backdoor alongside a signed Windows kernel-level driver. Kaspersky’s Secur…