Chinese state‑linked operators have quietly upgraded the ToneShell backdoor with kernel‑level stealth, delivering it through a signed Windows mini‑filter driver that can blind endpoint defenses and entrench espionage footholds inside government networks across Asia.
Background
Researchers...
In a striking demonstration of cybercrime ingenuity, a sophisticated Chinese APT group—known as Mustang Panda—has been found exploiting a legitimate Windows tool to slip past antivirus defenses. This emerging threat, uncovered by threat researchers at Trend Micro, involves the abuse of...