Tag: stealthy loader

1 Attack Reports | 0 Vulnerabilities

Attack reports

Evasive Panda APT poisons DNS requests to deliver MgBot

The Evasive Panda APT group conducted highly-targeted campaigns from November 2022 to November 2024, employing adversary-in-the-middle attacks and DNS poisoning techniques. They developed a new loader that evades detection and uses hybrid encryption for victim-specific implants. The group utilized …
apt
mgbot
dns poisoning
fake updaters
2025-12-24
aitm attacks
hybrid encryption
multi-stage shellcode
stealthy loader
Published: December 24, 2025
Downloadable IOCs: 11
Click here to see more Attack Reports