Chinese Hackers Employ Rootkit to Conceal ToneShell Malware

TL;DR Summary
Chinese state hackers, attributed to Mustang Panda, have used a sophisticated kernel-mode rootkit to hide the ToneShell malware activity in attacks against Asian government organizations, employing advanced evasion techniques and malware variants to enhance stealth and resilience.
Chinese state hackers use rootkit to hide ToneShell malware activity BleepingComputer
Reading Insights
Total Reads
0
Unique Readers
1
Time Saved
3 min
vs 4 min read
Condensed
94%
642 → 37 words
Want the full story? Read the original article
Read on BleepingComputer