#coolclient


Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

Aug 14, 2026 // 16:16

The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode […]