Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool

Kyaw_Myo_Oo — Sun, 20 Apr 2025 08:24:43 GMT

Dear All,

The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called VShell to infect Linux systems.

"Threat actors are increasingly using open source tools in their arsenals for cost-effectiveness and obfuscation to save money and, in this case, plausibly blend in with the pool of non-state-sponsored and often less technical adversaries (e.g., script kiddies), thereby making attribution even more difficult," Sysdig researcher Alessandra Rizzo said in a report shared with The Hacker News.

topic Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool in Threats

Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool