Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems
A Philippine military business was compromised by a Chinese advanced persistent threat (APT) outfit employing an as-yet-unknown fileless malware framework known as EggStreme.
In a post shared with The Hacker News, Bitdefender researcher Bogdan Zavadovschi claimed that this multi-stage toolkit uses DLL sideloading to execute payloads and injects malicious code straight into RAM to achieve persistent, low-profile espionage.
EggStremeAgent, the main component, is a fully functional backdoor that allows for lateral movement, extensive system reconnaissance, and data theft using an injected keylogger.
Given the geopolitical tensions caused by territorial disputes in the South China Sea between China, Vietnam, the Philippines, Taiwan, Malaysia, and Brunei, Chinese state-sponsored hacki...