資安業者AhnLab針對中國駭客UNC5174活動提出警告，指出駭客濫用Discord的API進行C2通訊，並以開源程式庫DiscordGo打造後門程式，使得櫝關活動難以察覺

Security researchers at Sysdig discover threat actors repurposing legitimate open source security tools for cyberattacks, with Chinese-sponsored UNC5174 group leveraging Linux-based VShell and other tools to evade detection.

UNC5174 그룹의 Discord Bot 백도어 악성코드 ASEC

(Bild: KI-generiert) Analyse der Angriffe von Hackergruppe UNC5174, die Linux-Systeme mit Snowlight Malware und VShell-Tool in westlichen Ländern, einschließlich Regierungsbehörden und Forschungseinri...

Blog com notícias sobre, Linux, Android, Segurança , etc

Security researchers at Sysdig discover threat actors repurposing legitimate open source security tools for cyberattacks, with Chinese-sponsored UNC5174 group leveraging Linux-based VShell and other tools to evade detection.

Chinesische Hacker der Gruppe UNC5174 nutzen SNOWLIGHT und VShell, um Linux-Systeme anzugreifen. Die Kampagne setzt auf Open-Source-Tools zur Kostenreduktion und erschwerten Zuordnung.

The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called VShell to infect Linux systems. "Threat actors are increasingly using open source tools in their arsenals for cost-effectiveness and obfuscation to save money and, in this case, plausibly blend in with the pool of

UNC5174 uses SNOWLIGHT and VShell to target Linux and macOS systems, exploiting Ivanti flaws for remote control.

: Let the espionage and access resale campaigns begin (again)

China-linked group UNC5174 hit French govt, telecom, media, finance and transport sectors using Ivanti CSA zero-days, says France’s ANSSI.

Known threat groups APT15 and UNC5174 unleashed attacks against the security firm and more than 70 other high-value targets as part of ongoing cyberespionage and other malicious activity involving Sha...