Mastang Panda Uses Venezuela News to Spread LOTUSLITE Malware

Acronis Threat Research found a targeted spear‑phishing campaign using Venezuela news lures and a renamed music player to DLL‑sideload a backdoor called LOTUSLITE; the malware enables remote control and data theft, sends exfiltrated data to 172.81.60.97, and is attributed with moderate confidence to the China‑linked Mustang Panda group.