espionage campaigns Archives

The China-nexus RedDelta threat actor has targeted Mongolia, Taiwan, Myanmar, Vietnam, and Cambodia in order to distribute a customized PlugX backdoor between July 2023 and December 2024. According to a new analysis by Recorded Future's Insikt Group, the group used lure documents with themes related to flood protection in Mongolia, the Vietnamese National Holiday, the 2024 Taiwanese presidential candidate Terry Gou, and invitations to meetings, including one hosted by the Association of Southeast Asian Nations (ASEAN). The threat actor is thought to have compromised the Communist Party of Vietnam in November 2024 and the Mongolian Ministry of Defense in August 2024 read more about RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns. Get up to date ...

Mustang Panda, an advanced persistent threat (APT) group with ties to China, has been seen using Visual Studio Code as a weapon in espionage campaigns against Southeast Asian governments. Palo Alto Networks Unit 42 researcher Tom Fakterman described this threat actor's usage of the inbuilt reverse shell capability in Visual Studio Code as a relatively new approach that was initially shown by Truvis Thornton in September 2023. The effort is believed to be an extension of an attack that was previously reported and that was launched in late September 2023 against an unidentified government body in Southeast Asia read more about Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks. Get up to date on the latest cybersecurity news and enhance your knowledge of cyb...