APT24 Expands Cyberespionage with BadAudio Malware via Supply Chain Attacks
First seen 2 Dec 2025, 18:33 UTC
•
•81% similarity
•51
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
APT24, a China-linked cyberespionage group, has been deploying the BadAudio malware through supply chain attacks over a three-year period. The Google Threat Intelligence Group reports that APT24 has shifted tactics from broad web exploitation to hijacking legitimate public sites to launch its attacks.
ThreatCluster AI
How this analysis works