Chinese Hackers Exploit IPv6 Vulnerability to Launch Stealthy “Spellbinder” Man-in-the-Middle Attacks
Chinese APT group TheWizards deploys Spellbinder, a sophisticated lateral movement tool enabling adversary-in-the-middle attacks through IPv6 SLAAC spoofing. The tool intercepts network traffic to hijack software update mechanisms, particularly targeting Sogou Pinyin and Tencent QQ, to del...