---
id: 10102
title: "StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms"
source_domain: volexity.com
source_url: "https://www.volexity.com/blog/2024/08/02/stormbamboo-compromises-isp-to-abuse-insecure-software-update-mechanisms/"
published_at: "2024-08-02T12:05:13Z"
tags: ["vulnerability-research", "threat-intelligence", "malware", "apt", "china", "isp", "dns-poisoning", "gimmick", "macma", "reloadext", "stormbamboo", "volexity", "update-poisoning"]
phying_url: "https://phying.com/item/10102"
lang: en
---

# StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

## Summary

# StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms August 2, 2024 Ankur Saini, Paul Rascagneres, Steven Adair, and Tom Lancaster In mid-2023, Volexity detected and...

## Intelligence Metadata

- **Sources:** volexity.com
- **Published:** 2024-08-02T12:05:13Z
- **Original:** https://www.volexity.com/blog/2024/08/02/stormbamboo-compromises-isp-to-abuse-insecure-software-update-mechanisms/
- **Phying News:** https://phying.com/item/10102