Netskope Threat Labs

MQsTTang

ATP Sandbox Adv. HeuristicsNetskope IPS

MQsTTang is a backdoor used by the Mustang Panda intrusion set, built with the Qt framework and using the MQTT protocol for command and control, marking new ground in the group's tooling development.

First seen
May 2023
Last seen
October 2026
Alert Name
Win32.Backdoor.MQsTTang