Vicious_Panda__2020__Vicious_Panda_The_COVID_Campaign_-_Check_Point_Research.pdf

Check Point Research assesses a Chinese-based threat actor campaign, Vicious Panda: The COVID Campaign, abusing the COVID-19 crisis to deliver a novel malware implant to Mongolian public-sector targets via weaponized RTF documents and the RoyalRoad framework, detailing the infection chain, multi-stage payloads, infrastructure, and historical links to prior government-targeted campaigns.