Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign
An abandoned update server for Sogou Zhuyin IME software was exploited by threat actors in an espionage campaign, distributing various malware including C6DOOR and GTELAM. The attacks primarily targeted users in Eastern Asia through sophisticated methods like hijacked updates and fake cloud services.
Update
Read Full Original Article →