A Philippine military business was compromised by a Chinese advanced persistent threat (APT) outfit employing an as-yet-unknown fileless malware framework known as EggStreme.
In a post shared with The Hacker News, Bitdefender researcher Bogdan Zavadovschi claimed that this multi-stage toolkit uses DLL sideloading to execute payloads and injects malicious code straight into RAM to achieve persistent, low-profile espionage.
EggStremeAgent, the main component, is a fully functional backdoor that allows for lateral movement, extensive system reconnaissance, and data theft using an injected keylogger.
Given the geopolitical tensions caused by territorial disputes in the South China Sea between China, Vietnam, the Philippines, Taiwan, Malaysia, and Brunei, Chinese state-sponsored hacking groups have a tendency to target the Philippines read more about Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.