Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Malicious Signal, Line, and Gmail Installers Target Chinese-Speaking Users with Backdoors

hunt.io | blog | #backdoor | #gmail | #signal | #line | #malware-distribution | #search-engine-poisoning

Summary

Fake download pages on a Hong Kong server distribute backdoored Signal, Line, and Gmail installers to Chinese-speaking users, relying on search engine manipulation rather than lookalike URLs.
Published
Collected

original ↗

Related coverage

  1. Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more (blog.trailofbits.com)
  2. The Gentlemen Affiliate Deploys EtherRAT Across Windows Networks Using Ethereum Smart Contract C2 (hunt.io)
  3. DinDoor Backdoor: Deno Runtime Abuse and 20 Active C2 Servers (hunt.io)
  4. Rekoobe Backdoor Discovered in Open Directory, Possibly Targeting TradingView Users (hunt.io)
  5. WarmCookie Infrastructure Update: Uncovering New C2 Servers and Threats (hunt.io)
  6. Toneshell Backdoor Used to Target Attendees of the IISS Defence Summit (hunt.io)

back