Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles

Cybersecurity researchers have identified a new variant of the LOTUSLITE malware, distributed via a theme targeting India's banking sector and South Korea's policy circles. The malware uses HTTPS to communicate with a dynamic DNS-based command-and-control server, enabling remote shell access, file operations, and espionage-focused capabilities.