China’s ‘Evasive Panda’ Hijacks Software Updates to Deliver Custom Backdoor

Researchers observed downloads of installers for the APT’s flagship backdoor, MgBot, when users at a Chinese NGO were updating legitimate applications.