CoolClient

Narrative intelligence for CoolClient: 1 tracked articles, claims, and spin patterns across AI and technology coverage.

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

Mustang Panda, a known threat actor, has updated its CoolClient backdoor with a signed Windows kernel-mode rootkit to enhance stealth and persistence across targets in Myanmar, Mongolia, and Pakistan.

Spin 30% Source-Supported AI Risk Moderate Needs Evidence

The Hacker News

Published Aug 14, 2026 · Analyzed Aug 17, 2026

Related Claims

01 Mustang Panda has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode rootkit that can hide and protect malicious processes, files, registry objects, and command-and-control (C2) network information.

Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO