China-linked hackers target Linux systems with new spying malware

Category	Details
Threat Actors	Gelsemium (China-linked state-sponsored threat actor).
Campaign Overview	Espionage campaign targeting Linux systems, deploying malware strains WolfsBane and FireWood.
Target Regions (Or Victims)	Taiwan, the Philippines, Singapore (likely targets), East Asia, Middle East.
Methodology	Exploiting an unknown web application vulnerability to gain access to victims’ devices.
Product targeted	Linux systems.
Malware Reference	WolfsBane (Linux backdoor), FireWood (Linux backdoor), Gelsevirine (Windows backdoor), Project Wood.
Tools Used	WolfsBane, FireWood (backdoors).
Vulnerabilities Exploited	Unknown web application vulnerability (specifics not provided).
TTPs	Targeting sensitive data (system information, user credentials, files), evading detection.
Attribution	Gelsemium (China-aligned state hackers).
Recommendations	Increased focus on securing Linux systems, especially internet-facing systems vulnerable to exploits.
Source	The Record

Read full article: https://therecord.media/china-hackers-linux-malware-target

Disclaimer: The above summary has been generated by an AI language model.