logo

Mustang Panda Exploits Zoho WorkDrive in Attacks on Indian Government

ID: bf6b5c41-8591-57c1-b510-14212b0d894c

STIX ID: report--bf6b5c41-8591-57c1-b510-14212b0d894c

Feed Name: ThreatCluster

Threat Score
90/100

Date Published: 2026-06-30

Date Updated: 2026-07-02

...
...

Mustang Panda, a China-aligned APT, is conducting dual campaigns against Indian government and energy sectors, using Zoho WorkDrive as a command center and newly developed malware to blend malicious traffic with legitimate cloud activity and exfiltrate sensitive data; investigations and heightened security responses are ongoing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.