9/22/26, 11:03 AM Myanmar Cyber Threat Landscape, 2016–2026: A Public-Source Review — Malware INFO Blog 2022 Mustang Panda-Linked Evidence Chain Selected public-source record • not national incident prevalence 1 2 3 4 ? Endpoint access Collection Staging Identity risk Final destination Observed target system Documents and browser data Temporary distribution server Credentials, tokens, cookies Not established The temporary server was partial evidence; the complete victim set and final destination were unknown. Research cutoff: 2026-09-01 • Source and method notes appear in the article Five-stage diagram of the 2022 observed incident chain from endpoint access through collection, browser identity theft, temporary staging, and an unknown final destination Figure 4. An evidence-bounded interpretation of the 2022 observation. The unknown final destination is part of the finding, not a gap to fill with speculation. The case also shows why browser artifacts deserve incident-response priority. A stolen password may be reset; a live session cookie or token can sometimes provide continued access until revoked. Response should therefore consider session invalidation, token rotation, mailbox rules, identity-provider logs, trusted-device enrollment, and evidence-preserving endpoint collection—not password changes alone. 2023–2026: regional cyber-enabled crime and continuing targeted campaigns 2023: cyber-enabled fraud as a human-security problem The United Nations Office on Drugs and Crime documented Myanmar within a Southeast Asian ecosystem of casinos, online scams, financial fraud, and trafficking in persons for forced criminality. The report is qualitative and explicitly notes limited statistical data. It should not be Skip to content converted into a precise Myanmar incident count. https://www.malwareinfo.app/blog/posts/myanmar-cyber-threat-landscape-2016-2026/?utm_source=chatgpt.com 10/19