Archive · 9 Jan 2026
Evasive Panda Cyber Espionage Targets India
A group of hackers called Evasive Panda has been sneaking into computers in India, Turkey, and China for over two years.
They trick people into installing fake updates for popular apps like Tencent QQ and iQIYI Video.
Once inside, the hackers can steal files, see what people type, and control the computer without being noticed.
They use special tricks to hide their malware in normal computer processes.
In India, this has led to a lot of cybercrime, affecting important areas like banks and hospitals.
Experts say people and companies should be careful when downloading updates and use good security software to stay safe.
Evasive Panda has been infiltrating systems in India, Turkey, and China since November 2022.
The hackers used fake software updates to trick users into installing malware.
The malware, MgBot, steals files, logs keystrokes, and executes commands.
In 2025, India reported 265 million malware detections and 2.5 million cybercrime cases.
Kaspersky recommends using multi-factor authentication, monitoring networks, and being cautious with updates.
- Who
- Hacker group Evasive Panda
- What
- Cyber espionage campaign using fake software updates
- When
- Since November 2022
- Where
- India, Turkey, China
- Why
- To steal files, log keystrokes, and execute commands
- Attack Duration
- Since November 2022
- Targeted Countries
- India, Turkey, China
- Malware Used
- MgBot implant
- Malware Delivery Method
- Fake software updates
- Impact in India (2025)
- 265 million malware detections, 2.5 million cybercrime cases
- Critical Sectors Affected
- Finance, Healthcare
- Security Firm Involved
- Kaspersky