Latest cybersecurity reporting from selected sources.

Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware

A suspected China-linked threat actor targeted the Indian branch of a global manufacturer leveraging an open source offensive toolkit

DKnife is a Chinese made malware framework that targets Chinese-based users

Detected by Check Point researchers, VoidLink is a sophisticated malware framework that can be used to implant malware in the most common cloud environments

The cyber espionage group uses a previously undocumented network implant to drop two downloaders, LittleDaemon and DaemonLogistics, which deliver a backdoor

Bitdefender said the sophisticated multi-stage operation allowed attackers to maintain persistent access and steal sensitive data from a Philippines military company

The FBI says mainly Chinese-made IoT devices pose a threat from Badbox 2.0 malware

Cisco Talos reported that a Chinese group has deployed web shells and malware in local government networks post-exploitation

Mandiant revealed that Chinese espionage actor UNC3886 has deployed modified versions of the TinyShell backdoor across multiple Juniper OS routers

Forescout observed the recently identified Chinese hacking group using medical imaging software applications to deliver malware

Trend Micro found that Chinese espionage group Mustang Panda is deploying malware via legitimate Microsoft tools, enabling it to bypass ESET antivirus applications

The FBI deleted Chinese PlugX malware from thousands of devices in the US, using a technique developed by French cybersecurity firm Sekoia.io

The US government has sanctioned Sichuan Silence and one of its employees for the mass compromise of firewalls which led to the deployment of malware and ransomware

The Chinese cyber espionage group was observed jailbreaking a Cisco switch appliance using a zero-day exploit

Symantec said Chinese espionage group Daggerfly has updated its malware toolkit as it looks to target Windows, Linux, macOS and Android operating systems

The ELF backdoor, initially thought to be a variant of existing malware, has a Windows and a Linux version

Dutch authorities reveal that a cyber-espionage campaign using novel “Coathanger” malware was much more extensive than first thought

Dutch intelligence services have blamed China for an attack last year targeting FortiGuard devices

The campaign deployed many malware families, including Skipjack, DepthCharge, Foxglove and Foxtrot

Chinese threat actor used malware in attacks