Home / Oct 04, 2026 / Story
0
#3 The Hacker News general October 02, 2026 at 17:33 UTC

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

By [email protected] (The Hacker News)

AI Summary

A previously undocumented backdoor dubbed 'Antino,' attributed to a China-nexus threat actor by Cisco Talos, is targeting government and policy organizations across Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar. Antino uses Microsoft Outlook and OneDrive for command-and-control communications, a living-off-the-land technique designed to blend into legitimate cloud traffic and evade detection. The campaign represents a significant espionage threat against Asian government entities.

Relevance score: 84.0/100

# More from October 04