Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs

The China-aligned threat actor known as Mustang Panda has been observed using an updated version of a backdoor called TONESHELL. "The worm only executes on devices with Thailand-based IP addresses and drops the Yokai backdoor," researchers said.