Back to today’s briefing

Story perspectives

Chinese Hackers Use EA App to Steal Data

2/18/2025

34 5

Summary

Story summary

A recent investigation by Trend Micro has uncovered the tactics of the Chinese cyber group Earth Preta, or Mustang Panda. They cleverly utilize Microsoft’s MAVInject.exe to bypass ESET antivirus, deploying a decoy PDF and stealthily sideloading a variant of the TONESHELL backdoor through a legitimate Electronic Arts app, all aimed at stealing sensitive data.

1 of 1

Story summary

A recent investigation by Trend Micro has uncovered the tactics of the Chinese cyber group Earth Preta, or Mustang Panda. They cleverly utilize Microsoft’s MAVInject.exe to bypass ESET antivirus, deploying a decoy PDF and stealthily sideloading a variant of the TONESHELL backdoor through a legitimate Electronic Arts app, all aimed at stealing sensitive data.