Advanced persistent threat group feature: Mustang Panda

Mustang Panda (also tracked as TA416, Bronze President, TEMP.Hex) is a PRC-linked APT focused on long-term cyber espionage across governments, NGOs, telecoms, research institutions and diplomatic missions worldwide. The group uses tailored spear-phishing lures, exploits (notably CVE-2017-0199), and a mix of public and custom malware (PlugX, Poison Ivy, Hodor), along with tools like Cobalt Strike and reverse shells to maintain persistence and exfiltrate sensitive information aligned with PRC strategic interests.