CyberWire Daily
Pandas with a purpose. [Research Saturday]
May 24, 2025 · 17 min · Season 9 · Episode 378Bonus
0:00-17:20
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
This week, we are joined by Deepen Desai, Zscaler's Chief Security Officer and EVP of Cyber and AI Engineering, taking a dive deep into Mustang Panda’s latest campaign. Zscaler ThreatLabz uncovered new tools used by Mustang Panda, including the backdoors TONEINS, TONESHELL, PUBLOAD, and the proxy tool StarLoader, all delivered via phishing.
They also discovered two custom keyloggers, PAKLOG and CorKLOG, and an EDR evasion tool, SplatCloak, highlighting the group's focus on surveillance, persistence, and stealth in cyberespionage operations.4o.
The research can be found here:
Deepen Desai
linkedin.comZscaler
linkedin.com