Mustang Panda Lure Document Spawning Sideloading Process

Ibrahim Saud@tektrix

•updated Jun 30, 2026•4•0•5

Detects execution of processes by masqueraded lure executables associated with Mustang Panda campaign themes (e.g., India-Taiwan relations, hydropower projects) spawning known LOLBins like rundll32.exe, regsvr32.exe, or PowerShell, indicating potential side-loading or malicious loader activity.