From bb366e3d1183eaae6bc121ff981866e77a839c44 Mon Sep 17 00:00:00 2001
From: S3N4T0R <121706460+S3N4T0R-0X0@users.noreply.github.com>
Date: Mon, 9 Dec 2024 15:18:22 -0500
Subject: [PATCH] Update README.md

---
 Chinese APT/Wicked Panda/README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Chinese APT/Wicked Panda/README.md b/Chinese APT/Wicked Panda/README.md
index b0b707b..2ec893c 100644
--- a/Chinese APT/Wicked Panda/README.md	
+++ b/Chinese APT/Wicked Panda/README.md	
@@ -93,3 +93,4 @@ Why the attackers Use Hashing?
   
 3.Memory-Only Execution: Useful in memory-resident malware that avoids writing cleartext strings to disk.
 
+## The third stage (MoonWalk backdoor)