is a China-linked cyber espionage campaign targeting Myanmar's government and IT sectors, using deceptive lures such as graduation ceremony invitations and holiday calendars to trick victims into executing malware. The multi-stage infection chain abuses legitimate Windows tools like `ftp.exe` to reconstruct and deploy a custom Go-based backdoor called **QUICAgent**, which communicates with its command-and-control server via the QUIC protocol and supports file transfer, command execution, and directory browsing. Separately, the China-linked Mustang Panda group has been observed deploying an updated version of the **COOLCLIENT** backdoor featuring a new kernel-mode driver that enhances stealth by hiding malicious processes and protecting related files from detection.
