{
	"id": "16f3a8cb-b1a3-4db3-850e-f09df622dccb",
	"created_at": "2026-04-06T00:15:07.635789Z",
	"updated_at": "2026-04-10T13:12:12.122915Z",
	"deleted_at": null,
	"sha1_hash": "389d529c64799c785f09b5eee33416671a7d58d3",
	"title": "Secure Communications Blog",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 86513,
	"plain_text": "Secure Communications Blog\r\nBy BlackBerry\r\nArchived: 2026-04-05 19:16:31 UTC\r\nRecommended Reading\r\nBlackBerry Secure Communications Blog\r\nFeb 19, 2026·Articles\r\nThe Mission-Critical Standard: Why Mission-Certified Communications are the Future of High-Stakes Operations\r\nMission-certified communications deliver secure, unified support in high-stakes operations.\r\nFeb 11, 2026·Articles\r\nBlackBerry UEM in Action: How BlackBerry UEM Enables Trusted Mobile Operations Across\r\nthe German Federal Government\r\nBlackBerry UEM delivers trusted, compliant device management in Germany.\r\nJan 08, 2026·Articles\r\nSecure Communications in 2026: Predictions About How Trust Will Be Owned, Proven, and\r\nDefended\r\nWhy 2026 marks a break in secure communications: quantum readiness, metadata risk, verified identity, and\r\ndefense‑grade control redefine trust.\r\nFILTER ALL THE LATEST INSIGHTS\r\nShowing 9 results of 210\r\nShowing 9 results of 210\r\nMar 23, 2026Articles\r\nhttps://blogs.blackberry.com/en/2022/10/mustang-panda-abuses-legitimate-apps-to-target-myanmar-based-victims\r\nPage 1 of 3\n\nIntroducing the BlackBerry AtHoc Command Center: A Unified Workspace for Coordinated\r\nOperations\r\nStreamlining real-time awareness and coordinated response.\r\nMar 17, 2026Articles\r\nThe New BlackBerry Work: Making Devices Smarter with Enterprise AI\r\nBlackBerry Work Smart Tools offer productivity without compromise.\r\nMar 11, 2026Articles\r\nEncryption Alone Is Not a Security Strategy\r\nConsumer apps lack identity and device controls, risking sensitive data.\r\nMar 10, 2026Articles\r\nThe Latest Security Vulnerability Exploit Doesn't Break Your Encryption. It Bypasses It.\r\nA zero-day vulnerability exploit shows device compromises can bypass encryption entirely.\r\nFeb 19, 2026Articles\r\nThe Mission-Critical Standard: Why Mission-Certified Communications are the Future of High-Stakes Operations\r\nMission-certified communications deliver secure, unified support in high-stakes operations.\r\nFeb 11, 2026Articles\r\nBlackBerry UEM in Action: How BlackBerry UEM Enables Trusted Mobile Operations Across\r\nthe German Federal Government\r\nBlackBerry UEM delivers trusted, compliant device management in Germany.\r\nhttps://blogs.blackberry.com/en/2022/10/mustang-panda-abuses-legitimate-apps-to-target-myanmar-based-victims\r\nPage 2 of 3\n\nJan 13, 2026Articles\r\nVoices Under Siege: The New Frontline of Secure Communications\r\nCyber threats have moved to mobile communications, where identity, metadata exposure, and AI impersonation\r\nundermine trust.\r\nJan 8, 2026Articles\r\nSecure Communications in 2026: Predictions About How Trust Will Be Owned, Proven, and\r\nDefended\r\nWhy 2026 marks a break in secure communications: quantum readiness, metadata risk, verified identity, and\r\ndefense‑grade control redefine trust.\r\nDec 23, 2025Articles\r\nWhen Systems Fail: Resilience, Sovereignty, and Secure Communications\r\nA global cloud outage revealed the limits of centralized redundancy, underscoring that true operational resilience\r\nrequires sovereign communications.\r\nLoad more\r\nSource: https://blogs.blackberry.com/en/2022/10/mustang-panda-abuses-legitimate-apps-to-target-myanmar-based-victims\r\nhttps://blogs.blackberry.com/en/2022/10/mustang-panda-abuses-legitimate-apps-to-target-myanmar-based-victims\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://blogs.blackberry.com/en/2022/10/mustang-panda-abuses-legitimate-apps-to-target-myanmar-based-victims"
	],
	"report_names": [
		"mustang-panda-abuses-legitimate-apps-to-target-myanmar-based-victims"
	],
	"threat_actors": [
		{
			"id": "b69037ec-2605-4de4-bb32-a20d780a8406",
			"created_at": "2023-01-06T13:46:38.790766Z",
			"updated_at": "2026-04-10T02:00:03.101635Z",
			"deleted_at": null,
			"main_name": "MUSTANG PANDA",
			"aliases": [
				"Stately Taurus",
				"LuminousMoth",
				"TANTALUM",
				"Twill Typhoon",
				"TEMP.HEX",
				"Earth Preta",
				"Polaris",
				"BRONZE PRESIDENT",
				"HoneyMyte",
				"Red Lich",
				"TA416"
			],
			"source_name": "MISPGALAXY:MUSTANG PANDA",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "6daadf00-952c-408a-89be-aa490d891743",
			"created_at": "2025-08-07T02:03:24.654882Z",
			"updated_at": "2026-04-10T02:00:03.645565Z",
			"deleted_at": null,
			"main_name": "BRONZE PRESIDENT",
			"aliases": [
				"Earth Preta ",
				"HoneyMyte ",
				"Mustang Panda ",
				"Red Delta ",
				"Red Lich ",
				"Stately Taurus ",
				"TA416 ",
				"Temp.Hex ",
				"Twill Typhoon "
			],
			"source_name": "Secureworks:BRONZE PRESIDENT",
			"tools": [
				"BlueShell",
				"China Chopper",
				"Claimloader",
				"Cobalt Strike",
				"HIUPAN",
				"ORat",
				"PTSOCKET",
				"PUBLOAD",
				"PlugX",
				"RCSession",
				"TONESHELL",
				"TinyNote"
			],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "9baa7519-772a-4862-b412-6f0463691b89",
			"created_at": "2022-10-25T15:50:23.354429Z",
			"updated_at": "2026-04-10T02:00:05.310361Z",
			"deleted_at": null,
			"main_name": "Mustang Panda",
			"aliases": [
				"Mustang Panda",
				"TA416",
				"RedDelta",
				"BRONZE PRESIDENT",
				"STATELY TAURUS",
				"FIREANT",
				"CAMARO DRAGON",
				"EARTH PRETA",
				"HIVE0154",
				"TWILL TYPHOON",
				"TANTALUM",
				"LUMINOUS MOTH",
				"UNC6384",
				"TEMP.Hex",
				"Red Lich"
			],
			"source_name": "MITRE:Mustang Panda",
			"tools": [
				"CANONSTAGER",
				"STATICPLUGIN",
				"ShadowPad",
				"TONESHELL",
				"Cobalt Strike",
				"HIUPAN",
				"Impacket",
				"SplatCloak",
				"PAKLOG",
				"Wevtutil",
				"AdFind",
				"CLAIMLOADER",
				"Mimikatz",
				"PUBLOAD",
				"StarProxy",
				"CorKLOG",
				"RCSession",
				"NBTscan",
				"PoisonIvy",
				"SplatDropper",
				"China Chopper",
				"PlugX"
			],
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "2ee03999-5432-4a65-a850-c543b4fefc3d",
			"created_at": "2022-10-25T16:07:23.882813Z",
			"updated_at": "2026-04-10T02:00:04.776949Z",
			"deleted_at": null,
			"main_name": "Mustang Panda",
			"aliases": [
				"Bronze President",
				"Camaro Dragon",
				"Earth Preta",
				"G0129",
				"Hive0154",
				"HoneyMyte",
				"Mustang Panda",
				"Operation SMUGX",
				"Operation SmugX",
				"PKPLUG",
				"Red Lich",
				"Stately Taurus",
				"TEMP.Hex",
				"Twill Typhoon"
			],
			"source_name": "ETDA:Mustang Panda",
			"tools": [
				"9002 RAT",
				"AdFind",
				"Agent.dhwf",
				"Agentemis",
				"CHINACHOPPER",
				"China Chopper",
				"Chymine",
				"ClaimLoader",
				"Cobalt Strike",
				"CobaltStrike",
				"DCSync",
				"DOPLUGS",
				"Darkmoon",
				"Destroy RAT",
				"DestroyRAT",
				"Farseer",
				"Gen:Trojan.Heur.PT",
				"HOMEUNIX",
				"Hdump",
				"HenBox",
				"HidraQ",
				"Hodur",
				"Homux",
				"HopperTick",
				"Hydraq",
				"Impacket",
				"Kaba",
				"Korplug",
				"LadonGo",
				"MQsTTang",
				"McRAT",
				"MdmBot",
				"Mimikatz",
				"NBTscan",
				"NetSess",
				"Netview",
				"Orat",
				"POISONPLUG.SHADOW",
				"PUBLOAD",
				"PVE Find AD Users",
				"PlugX",
				"Poison Ivy",
				"PowerView",
				"QMAGENT",
				"RCSession",
				"RedDelta",
				"Roarur",
				"SPIVY",
				"ShadowPad Winnti",
				"SinoChopper",
				"Sogu",
				"TIGERPLUG",
				"TONEINS",
				"TONESHELL",
				"TVT",
				"TeamViewer",
				"Thoper",
				"TinyNote",
				"WispRider",
				"WmiExec",
				"XShellGhost",
				"Xamtrav",
				"Zupdax",
				"cobeacon",
				"nbtscan",
				"nmap",
				"pivy",
				"poisonivy"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434507,
	"ts_updated_at": 1775826732,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/389d529c64799c785f09b5eee33416671a7d58d3.pdf",
		"text": "https://archive.orkl.eu/389d529c64799c785f09b5eee33416671a7d58d3.txt",
		"img": "https://archive.orkl.eu/389d529c64799c785f09b5eee33416671a7d58d3.jpg"
	}
}