China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

Chinese-aligned threat actors conducted coordinated campaigns targeting governments, journalists, and activists across Asia and Europe.

• •SHADOW-EARTH-053 exploited Microsoft Exchange and IIS vulnerabilities to deploy Godzilla web shells and ShadowPad backdoors in Pakistan, Thailand, Malaysia, India, Myanmar, Sri Lanka, Taiwan, and Poland
• •Attack techniques included DLL sideloading, Mimikatz privilege escalation, custom RDP launcher, and Sharp-SMBExec
• •GLITTER CARP and SEQUIN CARP phishing campaigns targeted journalists and Uyghur, Tibetan, and Hong Kong diaspora activists with credential harvesting
• •Tools used: IOX, GOST, Wstunnel for tunneling and RingQ for binary packing

This summary was automatically generated by AI based on the original article and may not be fully accurate.