Chinese hacking group MirrorFace has expanded beyond its traditional Japanese targets to attack a European diplomatic organization using a revived ANEL backdoor. Discovered by ESET in August 2024, Operation AkaiRyū employed sophisticated techniques including spear-phishing, DLL side-loadi...
Chinese threat actor Lotus Panda (aka Billbug/Bronze Elgin) is targeting government and infrastructure sectors across Southeast Asia with enhanced Sagerunex backdoor variants. Active since 2009, the group has developed new "beta" versions that leverage Dropbox, Twitter, and Zimbra webmail ...
Chinese hacking group Evasive Panda deploys advanced SSH daemon malware targeting network appliances, featuring sophisticated code injection, credential theft, and remote command capabilities. The malware suite, identified as ELF/Sshdinjector.A!tr, enables persistent access and covert oper...
