Hogfarming.7z

Based on available threat intelligence and technical databases, is a compressed archive associated with malicious activity, specifically linked to Earth Preta (also known as Mustang Panda), a Chinese-based Advanced Persistent Threat (APT) group . This file has been identified as a delivery vehicle for malware in cyberespionage campaigns targeting government and research entities. Technical Overview

: Government agencies, NGOs, and telecommunications sectors in Southeast Asia and Europe. HogFarming.7z

: Analysis suggests the archive often carries variants of the PlugX or ToneIns malware. PlugX is a modular Remote Access Trojan (RAT) used for data exfiltration, keystroke logging, and remote command execution. : Analysis suggests the archive often carries variants

: Deploy EDR (Endpoint Detection and Response) solutions to monitor for unusual DLL loading behavior from legitimate system binaries. : Add "HogFarming

: Add "HogFarming.7z" and similar suspicious archive names to email and web filter blocklists.

: Educate staff on the risks of opening unexpected compressed archives, even if the sender appears legitimate.