Chinese state‑linked operators have quietly upgraded the ToneShell backdoor with kernel‑level stealth, delivering it through a signed Windows mini‑filter driver that can blind endpoint defenses and entrench espionage footholds inside government networks across Asia.
Background
Researchers...