The Mustang Panda group is actively targeting Thailand with a new variant of the Toneshell9 backdoor, featuring advanced evasion techniques like AI-generated code and custom encryption. Alongside this, they've deployed SnakeDisk, a USB worm specifically designed to infect air-gapped systems within the country, delivering the Yokai backdoor. These campaigns utilize social engineering and weaponized documents to gain access to sensitive government networks.