China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions

UAT-8302, a China-nexus APT group, has targeted governments in South America and southeastern Europe using custom malware.

• •NetDraft (NosyDoor), a .NET backdoor, deployed by multiple China-aligned threat groups
• •Malware tools: CloudSorcerer, SNOWLIGHT, Deed RAT, Draculoader, and Rust-based SNOWRUST
• •Initial compromise via zero-day/N-day web application exploits
• •Attack chain includes reconnaissance, lateral movement, and alternate backdoors using Stowaway and SoftEther VPN

This summary was automatically generated by AI based on the original article and may not be fully accurate.