Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
22 April 2026
Cybersecurity researchers have discovered a new variant of a known malware called LOTUSLITE that's distributed via a theme related to India's banking sector.
"The backdoor communicates with a dynamic DNS-based command-and-control server over HTTPS and supports remote shell access, file operations, and session management, indicating a continued espionage-focused capability set rather than