Southeast Asia

GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian Governments

• Cyber Security

GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian Governments

Do Son July 24, 2026 0

GoSerpent backdoor drives a patient cyber espionage campaign against Southeast Asian governments, stealing files and credentials since at least 2021.

TinyRCT Backdoor Attacks Target Asian Critical Infrastructure

• Cybercriminals

TinyRCT Backdoor Attacks Target Asian Critical Infrastructure

Do Son June 30, 2026 0

Chinese-speaking actors deploy TinyRCT backdoor attacks against Southeast Asian government and energy sectors. Discover the CL-STA-1062 cyber espionage tactics.

The Triple-Headed Dragon: Inside the Three-Cluster Chinese Cyberespionage Campaign Targeting SE Asia

• Cyber Security
• Malware

The Triple-Headed Dragon: Inside the Three-Cluster Chinese Cyberespionage Campaign Targeting SE Asia

Do Son April 2, 2026 0

Unit 42 uncovers a massive 3-cluster cyberespionage campaign by China-aligned actors in SE Asia using USBFect, Hypnosis loaders, and stealthy RATs.

TrueChaos: The TrueConf Zero-Day That Turned Secure Updates Into a Government Espionage Backdoor

• Vulnerability Report

TrueChaos: The TrueConf Zero-Day That Turned Secure Updates Into a Government Espionage Backdoor

Do Son April 1, 2026 0

Check Point reveals "TrueChaos," an espionage campaign exploiting a TrueConf zero-day (CVE-2026-3502) to drop malware via fake updates. Patch to 8.5.3 now.

HoneyMyte Evolved: Spies Use Pixeldrain & CoolClient for Real-Time Surveillance

• Cyber Security
• Malware

HoneyMyte Evolved: Spies Use Pixeldrain & CoolClient for Real-Time Surveillance

Do Son January 28, 2026 0

HoneyMyte (Mustang Panda) shifts to real-time surveillance using updated CoolClient. New 2025 campaign uses Pixeldrain for stealthy exfiltration.

“Osiris” Rises: New Ransomware Targets Southeast Asian Food Giant with Advanced Tactics

• Malware

“Osiris” Rises: New Ransomware Targets Southeast Asian Food Giant with Advanced Tactics

Do Son January 26, 2026 0

New Osiris ransomware hits Southeast Asia, linking to Inc & Medusa groups. It uses BYOVD tactics to disable defenses. Unrelated to the 2016 variant.

The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments

• Cyber Security
• Malware

The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments

Do Son January 1, 2026 0

Kaspersky unmasks HoneyMyte's 2025 campaign, using the ProjectConfiguration.sys kernel rootkit to deploy ToneShell backdoors with elite stealth.

China-Nexus Autumn Dragon APT Exploits WinRAR Flaw to Deploy Telegram C2 Backdoor

• Cyber Security

China-Nexus Autumn Dragon APT Exploits WinRAR Flaw to Deploy Telegram C2 Backdoor

Do Son November 25, 2025 0

CyberArmor exposed Autumn Dragon, a China-nexus APT using a WinRAR path traversal flaw (CVE-2025-8088) and DLL sideloading to deploy a Telegram C2 backdoor for espionage in Southeast Asia.

Next-Gen Android Banking Trojan Hides in Digital ID App, Automates Crypto Wallet Theft and Evades Emulators

• Malware

Next-Gen Android Banking Trojan Hides in Digital ID App, Automates Crypto Wallet Theft and Evades Emulators

Do Son November 3, 2025 0

Cyfirma exposed Android/BankBot-YNRK, a Trojan cloning Indonesia’s Digital ID app to steal credentials and crypto assets. It uses anti-emulation checks and JobScheduler for persistent device takeover.

DeedRAT Backdoor: Chinese APT Targets Southeast Asian Governments via Vulnerable AV Software

• Malware

DeedRAT Backdoor: Chinese APT Targets Southeast Asian Governments via Vulnerable AV Software

Do Son July 22, 2025 0

LAB52 uncovers a sophisticated phishing campaign delivering DeedRAT, a modular backdoor by Chinese APTs, targeting Southeast Asian governments via vulnerable AV software.

Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage

• Cyber Security
• Malware

Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage

Do Son April 29, 2025 0

Earth Kurma APT campaign targets Southeast Asian governments and telecoms using rootkits, loaders, and cloud services to steal sensitive data.

Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign

• Cyber Security

Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign

Do Son April 21, 2025 0

The Billbug group targeted Southeast Asian organizations using advanced tools & DLL sideloading. This report details their sophisticated espionage campaign.