🚨 Chinese APT group ‘TheWizards’ is exploiting IPv6 spoofing with a new tool called #Spellbinder to drop the WizardNet backdoor via hijacked software updates.

Read: https://hackread.com/chinese-thewizards-exploits-ipv6-wizardnet-backdoor/

#Cybersecurity #APT #Malware #IPv6 #WizardNet

Chinese Group TheWizards Exploits IPv6 to Drop WizardNet Backdoor

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

ESET researchers publish an analysis of Spellbinder, a lateral movement tool used to perform adversary-in-the-middle attacks.