Mustang Panda, a China-linked advanced persistent threat (APT) group, is known for its cyber espionage campaigns targeting government entities, diplomatic organizations, and NGOs. A centerpiece of their operations is the PlugX malware family, a modular remote access trojan which employs a tailored approach for each campaign, utilizing various configurations for command-and-control infrastructure, operational capabilities, and stealth features.