Chinese Hackers Exploit SharePoint Flaws to Deploy Backdoors, Ransomware, and Loaders

Threat Score:
81
GB Hackers
4 hours ago

Overview

Chinese Hackers Exploit SharePoint Flaws to Deploy Backdoors, Ransomware, and Loaders Unit 42 researchers have identified significant overlaps between Microsoft’s reported ToolShell exploit chain targeting SharePoint vulnerabilities and a tracked activity cluster dubbed CL-CRI-1040. This cluster, active since at least March 2025, deploys a custom malware suite named Project AK47, comprising multi-protocol backdoors,ransomware, and DLL side-loading loaders. Microsoft’s analysis attributes the act...

Related Articles

5 articles