Chinese spies used Maduro's capture as a lure to phish US govt agencies

Acronis Threat Research Unit uncovered a targeted phishing campaign, attributed with moderate confidence to Beijing-backed Mustang Panda, that used a geopolitical lure about US plans for Venezuela to deliver a DLL-sideloaded backdoor named Lotuslite hidden alongside a renamed legitimate Kugou launcher; the C++ implant establishes persistence, beaconing to hard-coded IP-based C2 and enables data theft from infected systems.