HoneyMyte

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

1. Executive summary The HoneyMyte APT group (also associated with the MITRE-confirmed actor Mustang Panda, G0129) has significantly upgraded the CoolClient backdoor with a signed