Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
-
Government and policy organizations across Asia have been targeted in a new espionage campaign attributed to a China-nexus threat actor. According to Cisco Talos, the activity has focused on government and policy entities in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar.
The campaign involves the deployment of a previously undocumented backdoor codenamed Antino. Talos is tracking the cluster behind this activity.
Notably, the backdoor leverages Outlook and OneDrive for command-and-control (C2) communications, allowing it to blend malicious traffic with legitimate cloud services and making detection more difficult for defenders.
Source: The Hacker News
If your organization operates in any of the affected regions or sectors, have you observed any suspicious Outlook or OneDrive activity that could indicate this type of abuse?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login