🚨 China-linked hackers just targeted Tibetans with fake documents tied to the Dalai Lama & WPCT.
Behind it? Mustang Panda’s new malware chain: Claimloader → PUBLOAD → Pubshell (reverse shell access).
The twist? It spreads via Google Drive links & even USB worms.