Cybersecurity · 44 views
Chinese APT deploys new malware to keep access to hacked networks
A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD.
AI Summary
A Chinese espionage group known as UNC5221 has been infiltrating Microsoft 365 environments with the Brickstorm backdoor and two previously undocumented malware families, Plenet and AgentPSD. Investigators found the threat actor had gained entry to the victim network at least 18 months before it was detected. The group also compromised the victim organization’s managed services provider, extending its reach within the network. The discovery highlights the prolonged persistence of the actor and the breadth of its compromise.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016Continue reading
- State Bank of India Suffers a Customer PII Data LeakContinue reading
- PHP2Shell exposes the weakness in coordinated vulnerability disclosureContinue reading
- Railway warns devs to rotate secrets after potential breachContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow