Chinese Hackers Employ Rootkit to Conceal ToneShell Malware
Chinese state hackers, attributed to Mustang Panda, have used a sophisticated kernel-mode rootkit to hide the ToneShell malware activity in attacks against Asian government organizations, employing advanced evasion techniques and malware variants to enhance stealth and resilience.