Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
Acronis says Mustang Panda used Zoho WorkDrive for C2 and data theft in campaigns against Indian government and hydropower targets.
More info