APT24 Cyberespionage Campaign Utilizes BadAudio Malware Over Three Years

APT24 Cyberespionage Campaign Utilizes BadAudio Malware Over Three Years

First seen 2 Dec 2025, 18:33 UTC •MandiantBleepingcomputerScworldTechnadu •85% similarity •29.1

Article Content

Browse articles
ThreatCluster

The APT24 threat group, linked to China, has been conducting a cyberespionage campaign utilizing a newly discovered malware called BadAudio. This campaign has targeted over 20 legitimate public websites to deliver the malware through various methods, including spearphishing and watering hole attacks, from November 2022 to September 2025.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Apt24 Badaudio Cobalt Strike HoldingHands Badaudio Campaign Windows Malware Phishing Supply Chain Attack Google Drive OneDrive