<![CDATA[Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign]]>

<![CDATA[Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign]]>Government and policy organizations across Asia have been targeted in a new espionage campaign attributed to a China-nexus threat actor. According to Cisco Talos, the activity has focused on government and policy entities in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar.

The campaign involves the deployment of a previously undocumented backdoor codenamed Antino. Talos is tracking the cluster behind this activity.

Notably, the backdoor leverages Outlook and OneDrive for command-and-control (C2) communications, allowing it to blend malicious traffic with legitimate cloud services and making detection more difficult for defenders.

Source: The Hacker News

If your organization operates in any of the affected regions or sectors, have you observed any suspicious Outlook or OneDrive activity that could indicate this type of abuse?

]]>https://xploitlk.com/topic/547/antino-backdoor-uses-outlook-and-onedrive-for-c2-in-china-nexus-espionage-campaignRSS for NodeTue, 27 Oct 2026 08:18:36 GMTSat, 03 Oct 2026 02:30:23 GMT60