{"id":119879,"date":"2025-08-06T15:11:45","date_gmt":"2025-08-06T15:11:45","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=119879"},"modified":"2025-08-07T06:23:09","modified_gmt":"2025-08-07T06:23:09","slug":"mustang-panda-attacking-windows-users","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/","title":{"rendered":"Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome"},"content":{"rendered":"\n<p>A sophisticated new cyber campaign has emerged targeting Windows users through a deceptive malware variant known as ToneShell, which masquerades as the legitimate Google Chrome browser.<\/p>\n\n\n\n<p>The advanced persistent threat (APT) group Mustang Panda, known for its strategic targeting of government and technology sectors, has deployed this latest tool as part of an ongoing espionage operation designed to infiltrate corporate networks and steal sensitive information.<\/p>\n\n\n\n<p>The malware campaign leverages <a href=\"https:\/\/cybersecuritynews.com\/social-engineering-tactics\/\" target=\"_blank\" rel=\"noreferrer noopener\">social engineering<\/a> techniques to distribute ToneShell through compromised websites and phishing emails, often presenting itself as a Chrome browser update or installation package.<\/p>\n\n\n\n<p>Initial infection vectors include malicious email attachments disguised as <a href=\"https:\/\/cybersecuritynews.com\/threat-actors-exploiting-legitimate-software\/\" target=\"_blank\" rel=\"noreferrer noopener\">legitimate software<\/a> installers and drive-by downloads from compromised websites that redirect users to fake Chrome download pages.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg0H0__OUS5Zw9D3p2C5CkU2ipc0n_dBe8rslUJRPmEVj0Z3slL8xcNa7sDSzhRTkNc0FIFwwTK7vfvm5zhT5EKsTlc0PrM5bQRVJ4fCJV3PdsbdYHlW5GjFfUqVNd9f-qzxyej-33Ujt0jVvgaN_8eGiGSVlSJRROmh2KM_HTRyUfl059S1seZreokYAw\/s16000\/Attack%20chain%20(Source%20-%20Linkedin).webp\" alt=\"\"\/><figcaption class=\"wp-element-caption\">Attack chain (Source &#8211; Linkedin)<\/figcaption><\/figure><\/div>\n\n\n<p>CREST Registered Threat Intelligence Analyst&#8217;s Phyo Paing Htun, Zaw Min Htun and Kyaw Pyiyt Htet (Mikoyan) <a href=\"https:\/\/www.linkedin.com\/pulse\/tracing-toneshell-mustang-pandas-evolving-tradecraft-htet-mikoyan--o1s8c\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">noted<\/a> that ToneShell exhibits sophisticated evasion capabilities, utilizing process hollowing techniques to inject malicious code into legitimate system processes while maintaining the appearance of normal Chrome browser activity.<\/p>\n\n\n\n<p>The malware establishes persistence through registry modifications and scheduled task creation, ensuring continued access even after system reboots.<\/p>\n\n\n\n<p>The impact of this campaign extends beyond individual users, as ToneShell functions as a backdoor enabling remote access, data exfiltration, and lateral movement within compromised networks.<\/p>\n\n\n\n<p>Organizations across multiple sectors have reported suspicious network activity consistent with Mustang Panda&#8217;s operational patterns, including unauthorized data transfers and reconnaissance activities targeting intellectual property and government communications.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-infection-mechanism-and-payload-delivery\"><strong>Infection Mechanism and Payload Delivery<\/strong><\/h2>\n\n\n\n<p>ToneShell employs a multi-stage deployment process that begins with a dropper component designed to evade endpoint detection systems.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhsS5qR8WeEvVf7ZnikvTli9yglk1thaF9ZixZ-oO66-D-LuGUNp7WI5qWLC2jpr2fEIo4G9YVnhFaZK_DAMBUEmEOVJ74rFUNkdO_hIvRF-JwJbawYtucMISzgWsuOBQNJSP3B9XFqaU41HEq5Il03UfNyTI_InaH96KNxObnTUdiMR9kbZgmJsDjNYA8\/s16000\/API%20Function%20Capabilities%20(Source%20-%20Linkedin).webp\" alt=\"\"\/><figcaption class=\"wp-element-caption\">API Function Capabilities (Source &#8211; Linkedin)<\/figcaption><\/figure><\/div>\n\n\n<p>Upon execution, the <a href=\"https:\/\/cybersecuritynews.com\/chatgpt-powered-malware-analysis\/\" target=\"_blank\" rel=\"noreferrer noopener\">malware<\/a> creates a hollowed Chrome process and injects its payload using the following technique:-<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>HANDLE hProcess = CreateProcess(L\"chrome.exe\", NULL, NULL, NULL, \n    FALSE, CREATE_SUSPENDED, NULL, NULL, &amp;si, &amp;pi);\nVirtualAllocEx(hProcess, NULL, payload_size, MEM_COMMIT, PAGE_EXECUTE_READWRITE);\nWriteProcessMemory(hProcess, allocated_memory, malicious_payload, payload_size, NULL);<\/code><\/pre>\n\n\n\n<p>The malware establishes communication with command and control servers through encrypted channels, mimicking legitimate Chrome network traffic patterns.<\/p>\n\n\n\n<p>This sophisticated approach allows ToneShell to remain undetected while maintaining persistent access to compromised systems, highlighting the evolving threat landscape facing Windows users and organizations worldwide.<\/p>\n\n\n\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 92%,rgb(169,184,195) 100%)\">Equip your SOC with full access to the latest threat data from&nbsp;<strong>ANY.RUN TI Lookup<\/strong>&nbsp;that can Improve incident response -&gt;&nbsp;<strong><a href=\"https:\/\/any.run\/threat-intelligence-feeds\/?utm_source=csn_aug&amp;utm_medium=article&amp;utm_campaign=how-to-get-real-time-iocs&amp;utm_content=feeds-cta1&amp;utm_term=050825#contact-sales\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Get 14-day&nbsp;Free&nbsp;Trial<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A sophisticated new cyber campaign has emerged targeting Windows users through a deceptive malware variant known as ToneShell, which masquerades as the legitimate Google Chrome browser. The advanced persistent threat (APT) group Mustang Panda, known for its strategic targeting of government and technology sectors, has deployed this latest tool as part of an ongoing espionage [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":119984,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,48],"tags":[149,151],"class_list":{"0":"post-119879","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-threats","9":"tag-cyber-security","10":"tag-cyber-security-news"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.7.1 (Yoast SEO v25.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome<\/title>\n<meta name=\"description\" content=\"Mustang Panda targets Windows users with ToneShell malware, posing as Chrome to infiltrate networks via phishing and fake updates.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome\" \/>\n<meta property=\"og:description\" content=\"Mustang Panda targets Windows users with ToneShell malware, posing as Chrome to infiltrate networks via phishing and fake updates.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-06T15:11:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-07T06:23:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp\" \/><meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tushar Subhra Dutta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tushar Subhra Dutta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome","description":"Mustang Panda targets Windows users with ToneShell malware, posing as Chrome to infiltrate networks via phishing and fake updates.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/","og_locale":"en_US","og_type":"article","og_title":"Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome","og_description":"Mustang Panda targets Windows users with ToneShell malware, posing as Chrome to infiltrate networks via phishing and fake updates.","og_url":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-08-06T15:11:45+00:00","article_modified_time":"2025-08-07T06:23:09+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp","type":"","width":"","height":""},{"width":1600,"height":900,"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp","type":"image\/jpeg"}],"author":"Tushar Subhra Dutta","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp","twitter_creator":"@The_Cyber_News","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Tushar Subhra Dutta","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/"},"author":{"name":"Tushar Subhra Dutta","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c"},"headline":"Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome","datePublished":"2025-08-06T15:11:45+00:00","dateModified":"2025-08-07T06:23:09+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/"},"wordCount":376,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/#primaryimage"},"thumbnailUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news"],"articleSection":["Cyber Security News","Threats"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/","url":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/","name":"Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/#primaryimage"},"thumbnailUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-08-06T15:11:45+00:00","dateModified":"2025-08-07T06:23:09+00:00","description":"Mustang Panda targets Windows users with ToneShell malware, posing as Chrome to infiltrate networks via phishing and fake updates.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/#primaryimage","url":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/mustang-panda-attacking-windows-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"Mustang Panda Attacking Windows Users With ToneShell Malware Mimic as Google Chrome"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World&#039;s #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c","name":"Tushar Subhra Dutta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","caption":"Tushar Subhra Dutta"},"description":"Tushar is a senior cybersecurity and breach reporter. He specializes in covering cybersecurity news, trends, and emerging threats, data breaches, and malware attacks. With years of experience, he brings clarity and depth to complex security topics.","url":"https:\/\/cybersecuritynews.com\/author\/tushar\/"}]}},"jetpack_featured_media_url":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2ezclYfjf-HilavYiUeBm4cdd0rYvzydsXVxqjOohb97gcO_ZsfTjocS-jw22bGUzvdkyN70tdXJ1iKG7SUgNNA3a8KEef4IdQ4kXAgJqvU4OIk_d4kO56Oo1VuiEFBrKrb1doPXDjQc1ZWz7rEL-qfwfvWh5RKI6R_poyU_Axv-qt5xB6UeMySerJQE\/s16000\/Mustang%20Panda%20Attacking%20Windows%20Users%20With%20ToneShell%20Malware%20Mimic%20as%20Google%20Chrome.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/119879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=119879"}],"version-history":[{"count":3,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/119879\/revisions"}],"predecessor-version":[{"id":120024,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/119879\/revisions\/120024"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/119984"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=119879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=119879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=119879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}