Chinese government-backed hacking groups allegedly targeted AI experts, think tanks, universities, and government organizations across Asia through phishing lures and credential theft. Cisco Talos and Proofpoint linked the activity to the Antino backdoor and multiple campaigns aimed at intelligence gathering and access persistence. #Antino #Proofpoint #CiscoTalos #LynneEdwardsParker #HeidiCreboRediker
Keypoints
- Proofpoint found phishing emails impersonating economists and former U.S. officials to target AI experts.
- The attackers used fake AI policy lures to trick victims into opening malicious links.
- Malicious URLs led to OneDrive credential phishing pages to steal login information.
- Cisco Talos reported Antino backdoor activity against government targets across eight Asian countries.
- The campaign used decoy documents, phishing emails, and lure content for reconnaissance and intelligence gathering.
Read More: https://therecord.media/china-linked-phishing-scheme-backdoor-taiwan