Chinese state hackers use rootkit to hide ToneShell malware activity

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Deploy Rootkit to Conceal ToneShell Malware in Southeast Asia A Chinese-linked threat group, associated with HoneyMyte, is utilizing a new kernel rootkit to obscure its ToneShell backdoor. This cyber campaign has primarily targeted government networks in Southeast and East Asia, with significant effects noted in Myanmar and Thailand, focusing on long-term espionage rather than immediate financial gain. 3 sources 47