Mustang Panda Deploys New SnakeDisk USB Worm, Updates TONESHELL Backdoor

Sep 19, 2025 · 2 min read · Cybersecurity researchers have detected China-aligned group Mustang Panda deploying an updated TONESHELL backdoor and a new USB worm named SnakeDisk, signaling the group’s evolving tactics. The campaign, tracked by IBM X-Force as Hive0154 (also known...