Tag: ShadowPad

China-Aligned Attackers Use ShadowPad, IOX Proxy, and WMIC in Multi-Stage Espionage Campaign

The SHADOW-EARTH-053 group has been quietly infiltrating government agencies across eight countries since December 2024 using ShadowPad malware and living-off-the-land…