Filename

defender.exe

Confidence: ai extracted

Linked Entities 3

threat actor MUSTANG PANDA malware PlugX malware TONESHELL

Source Articles 2

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth
hacker-news Aug 14, 2026
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
securelist Aug 14, 2026