Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

A new campaign attributed to Tropic Trooper targets Chinese-speaking individuals using trojanized SumatraPDF to deploy the AdaptixC2 Beacon agent.

• •The attack uses a ZIP archive with military-themed document lures to launch a modified SumatraPDF reader
• •A custom AdaptixC2 Beacon listener leverages GitHub as a command-and-control platform
• •The attack chain includes TOSHIS loader variant to fetch encrypted shellcode and drop the backdoor in the background
• •VS Code tunnels are deployed on valuable targets for remote access
• •The staging server has previously hosted Cobalt Strike Beacon and EntryShell backdoor

This summary was automatically generated by AI based on the original article and may not be fully accurate.