⤷ Title: Mustang Panda APT Uses Hidden DLL and EnumFontsW to Launch Stealthy Tibet-Themed Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Oct 2025 02:11:55 +0000
════════════════════════
⌗ Tags: #Malware #APT #cyber_espionage #DLL Sideloading #EnumFontsW #Mustang Panda #Publoader #Tibet #Windows Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Oct 2025 02:11:55 +0000
════════════════════════
⌗ Tags: #Malware #APT #cyber_espionage #DLL Sideloading #EnumFontsW #Mustang Panda #Publoader #Tibet #Windows Security
Daily CyberSecurity
Mustang Panda APT Uses Hidden DLL and EnumFontsW to Launch Stealthy Tibet-Themed Campaign
A China-nexus APT, Mustang Panda, is targeting the Tibetan community using DLL sideloading and the EnumFontsW API to launch the stealthy Publoader backdoor and achieve persistence.