Tag: China APT
Sandboxie abuse turns the tool into a China-linked loader
Sophos has tied a previously undocumented cluster to eight DLL sideloading chains that leaned on signed, everyday Windows tools.
Chinese Threat Group OP 512 Strikes Legacy IIS Servers With Custom Web Shell Arsenal
Researchers discovered that the attacker waited 75 days after initial access before deploying a custom web shell framework designed to…