Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its command channel.

Acronis Threat Research Unit found active compromises inside Indian government networks, including machines used by senior administrative staff, and worked with