Mustang Panda targeted the systems of a southeast Asian government in a long-running campaign. The APT performed extensive reconnaissance on the network, identifying several usernames and machines that were likely of interest, and targeted those users with more extensive surveillance and tooling.