Malicious campaign of the APT group UNC5174 combines Snowlight and VShell

Sysdig's Threat Research Team (TRT) has uncovered an ongoing campaign of the Chinese APT group UNC5174 aimed at Linux-based systems in western countries and Asia-Pacific, combining the already-known Snowlight malware with the remote access Trojan (RAT) VShell, an open source tool that is considered to be particularly difficult to detect. The initial infection occurs via a Bash script that combines [...] The post Malignant campaign of the APT gro…

Sysdig has uncovered a campaign of the Chinese APT group targeting Linux-based systems in Western countries and Asia-Pacific.