Topic: stealth enhancements

Chinese Hackers Hide ToneShell Malware with Rootkit

A new cyberespionage campaign targets Asian governments using an advanced kernel-mode rootkit to deploy the ToneShell backdoor, attributed to the Mustang Panda hacking group. The rootkit employs sophisticated stealth techniques, including a stolen certificate, dynamic API resolution, and active i...