Exploiting Trust: Mustang Panda and the Human Terrain of Cyber Espionage

Uma Miskinyar

Situating Mustang Panda Within China’s Cyber Strategy

Mustang Panda is a Chinese state-aligned cyber espionage group known for conducting persistent malware campaigns to collect intelligence from government, military, and diplomatic targets. Originally concentrated in Southeast Asia, the cyber espionage threat actor has increasingly targeted United States and allied institutions. The group is also known by the alias Twill Typhoon, a designation used across both government and private-sector reporting.

Mustang Panda began conducting its operations in 2012, and since then has steadily broadened its reach. Mustang Panda’s geographic and operational expansion, coupled with improved malware tradecraft, has elevated its significance as a growing threat to U.S. national security. Notably, Mustang Panda targets adversaries of the Communist Party, according to cybersecurity firm Cyfirma. Open-source reporting indicates that Mustang Panda has shifted its anchor from Southeast Asia toward non-governmental organizations (NGOs), with its operations now extending across the United States, Europe, and Asia, namely in Russia, Mongolia, Myanmar, Pakistan, and Vietnam.

Beyond its recent geographic expansion to the homeland, Mustang Panda’s growing threat stems from its deliberate and adaptive targeting methodology. Rather than pursuing indiscriminate access, the group tailors its malware and delivery mechanisms to specific communities and individuals aligned with Chinese intelligence priorities.

Targeting Strategy and Operational Tactics

Mustang Panda commonly initiates infections through weaponized links that abuse trusted platforms such as Google Drive and URL-shortening services, delivering files that look like ordinary documents rather than obvious malware. Such lures rely on familiar tricks, including double file extensions and decoy PDFs. These then prompt users to click or open a file, unknowingly leveraging Dynamic Link Libraries (DLL) side-loading to execute malicious payloads while masquerading as legitimate system processes. This approach stands out not because of how technically advanced it is, but instead how quietly it operates through leaning on legitimate services and routine user behavior instead of overt exploits. These campaigns are far less likely to raise immediate red flags.

This approach explains why Mustang Panda’s activity is harder to detect than traditional military-focused cyber operations. Unlike attacks against defense or military networks, which benefit from dedicated monitoring and clearer indicators of compromise, targeting NGOs and civilian professionals blends almost seamlessly into everyday digital activity. However, by exploiting trusted professional networks and politically-relevant communications, the group reduces the number of technical anomalies that would normally trigger defensive alerts. As a result, Mustang Panda can operate below the threshold of traditional military cyber surveillance while still collecting strategically valuable intelligence.

The group succeeds not because it breaks systems, but instead because it manipulates people in numerous aspects, from leveraging trust and habits to exploiting predictable professional routines. Acting only after a target does something reasonable, it uses a human source as an initial access vector rather than behaving like a brute-force, exploit-driven cyber threat. Mustang Panda’s targeting is based on who its targets are, rather than the systems they use. In identity-driven targeting, as opposed to network-driven targeting, the technical payload matters less than the social plausibility of the messages delivered to the target.

Expansion Toward U.S.-Linked Targets

While Mustang Panda’s early campaigns were regionally focused, recent activity demonstrates a deliberate expansion toward United States-linked targets, signifying the group’s tactical maturation into a globally-oriented intelligence collection platform capable of operating against Western institutions. Rather than forcing access through technical exploits, Mustang Panda succeeds by convincing people to act in ways that feel normal and professionally reasonable.

Case Study: Exploiting Operation Absolute Resolve

In January of 2026, Mustang Panda targeted U.S. government and policy-related officials with Venezuela-themed phishing emails in the days after Operation Absolute Resolve, a textbook shift towards the group’s opportunistic, event-driven intelligence collection against U.S.-linked actors. The specific identities of the hacking campaign’s targets have yet to be disclosed to the public, and it is not clear if any of them were compromised. However, if compromised, the malware would allow its operators to steal data from targeted computers and enable persistence for ongoing access, according to the analysis.

According to Subhajeet Singha, a malware analyst and reverse engineer at Acronis who helped author the technical analysis, the attackers likely sought to capitalize on a rapidly unfolding geopolitical situation, appearing to be acting with unusual speed. In an interview, Singha said that it is the haste left behind digital traces that allowed the researchers to draw a link between the malware to earlier documented Mustang Panda-attributed operations.“They were clearly rushing,” Singha said, adding that the code showed a lower level of polish than the group’s past campaigns.

Researchers suspect the malware targeted U.S. government and policy entities based on the malware detected in zip files, indicating they were compiled on January 3 at 0655 GMT, just hours after the operation to seize Maduro began. Open-source reporting indicates that a component of the malware was uploaded to the sandbox on January 5 at 0827 GMT, the same day Maduro and his wife Cilia Flores pleaded not guilty to narcotics and weapons charges in a Manhattan courtroom. 

U.S. Government Attribution and Disruption Efforts

In January 2025, the U.S. Department of Justice (DOJ) publicly identified Mustang Panda as a hacking group sponsored by the People’s Republic of China, alongside the Federal Bureau of Investigation (FBI). The evolution from persistent nuisance to strategic threat is what drew Mustang Panda’s formal threat attribution from the U.S. government. The DOJ described the group to be responsible for developing espionage malware and penetrating targeted networks. Mustang Panda’s January activity in the U.S. is a sustained intelligence collection apparatus that has been operating over more than a decade, as targets include the following: government institutions, private businesses, and civil society organizations across the United States, Europe, and Asia, as well as Chinese dissident groups. 

According to DOJ filings, Mustang Panda employed a customized version of the PlugX malware to maintain persistent access, enable command-and-control functionality, and exfiltrate sensitive information. The campaign’s emphasis on stealth and long-term access rather than immediate disruption is salient as victims of the malware were unaware their systems had been compromised. The operation’s scale further elevates its significance as U.S. authorities reported removing PlugX malware from approximately 4,258 U.S.-based computers, with infections dating back to at least 2014. 

In a departure from traditional 'name and shame' tactics, the DOJ's 2025 response focused on active infrastructure neutralisation targeted towards breaking the infrastructure. Using nine court-authorized warrants, the operation focuses on cleaning infected systems without collecting content or conducting surveillance. Officials were explicit that the goal was not to dismantle the group itself, but to neutralize its technical capability. Led by French law enforcement and coordinated with U.S. authorities and the cybersecurity firm Sekoia.io, the operation reflects a broader international consensus that this threat requires collective action, not just attribution.

Chinese officials have rejected the allegations, demonstrated in an emailed response to Reuters. In this, a spokesperson for the Chinese embassy in Washington said that China opposes all forms of hacking and does not support or condone cyberattacks, describing claims of “Chinese cyber threats” as politically motivated. The FBI declined to comment.

Conclusion

Mustang Panda’s activity marks a new reality of contemporary intelligence competition, where even the most consequential cyber operations no longer arise through disruption, but instead through patience. Embedding itself within the routines of diplomats, policy professionals, and civil society actors, the group leverages the very openness that underpins democratic governance and exploits it. In doing this, it reframes cyber espionage as a contest for access, credibility, and influence.

Emerging technology’s exponential growth in the civilian world has a monumental impact on national security, simultaneously as models of intelligence collection challenge long-standing assumptions about what constitutes a national security threat. When adversaries prioritize human trust over network penetration, traditional defenses of firewalls, patching cycles, and military-grade monitoring offer limited protection. With this, the vulnerability instead lies in professional ecosystems that depend on information-sharing, legitimacy, and speed. 

As Mustang Panda continues its operational tactics below conventional thresholds of detection, the question for U.S. policymakers is not whether this activity can be attributed, but whether institutions are prepared to defend the human terrain that modern espionage increasingly targets.