Chinese threat actor Mustang Panda targeted Russian government computer systems with PlugX malware. The malware was disguised in a malicious file masquerading as a PDF, which was named after a Russian border guard unit.