Latest cybersecurity reporting from selected sources.

China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands

Researchers at Check Point link ‘Amarath-Dragon’ attacks to prolific Chinese cyber-espionage operation

A new UNC6384 campaign highlights the threat actor’s growing sophistication and geographic expansion

SEO poisoning attack has been observed targeting Chinese Windows users via lookalike domains, installing Hiddengh0st and Winos

A newly identified hacking group named GhostRedirector has compromised 65 Windows servers using previously unknown tools

Microsoft said Chinese actor Storm-2603 is deploying Warlock ransomware following the exploitation of vulnerabilities in on-prem SharePoint systems

Microsoft has observed three China-based threat actors, Linen Typhoon, Violet Typhoon and Storm-2603, exploiting the SharePoint vulnerabilities

NVISO discovered new variants of the BRICKSTORM backdoor, initially designed for Linux, on Windows systems

SecurityScorecard revealed that the large-scale password spraying campaign can bypass MFA and security access policies by utilizing Non-interactive sign-ins

Trend Micro found that Chinese espionage group Mustang Panda is deploying malware via legitimate Microsoft tools, enabling it to bypass ESET antivirus applications

Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems

Symantec said Chinese espionage group Daggerfly has updated its malware toolkit as it looks to target Windows, Linux, macOS and Android operating systems

Microsoft President Brad Smith told US Congress that the tech giant accepts responsibility for security failings regarding the 2023 China hack

The ELF backdoor, initially thought to be a variant of existing malware, has a Windows and a Linux version

A Microsoft report found that China-affiliated actors are publishing AI-generated content on social media to amplify controversial domestic issues in the US

A report has highlighted multiple security failings by Microsoft that allowed Chinese threat actors to access US government officials’ email accounts in the Summer of 2023

Microsoft’s annual digital defense report found a rise in Chinese state-affiliated groups attempting to infiltrate sectors like medical infrastructure and telecommunication

Chinese actor Storm-0558 compromised Outlook accounts

The findings come from a new report released by Microsoft Threat Analysis Center on Thursday

The threat actor used the stolen key to breach 25 organizations, including US government agencies