MEDIUMApt
Global

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

·Source: The Hacker News

Updated:

Executive Summary

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its command channel. Acronis Threat Research Unit found active compromises inside Indian government networks, including machines used by senior administrative staff, and worked with

Analysis

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its command channel. Acronis Threat Research Unit found active compromises inside Indian government networks, including machines used by senior administrative staff, and worked with
Source Attribution

Originally published by The Hacker News on Jun 29, 2026.

Related Threats