windows service hijacking

China-linked operators are reportedly using new and familiar malware families to keep multiple paths back into compromised networks, with recent reporting in March 2026 tying BPFDoor, TinyShell, Windows service hijacking, Cobalt Strike, and Google Drive command-and-control to long-lived access...