Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool

[Kyaw_Myo_Oo]

Dear All,

The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called VShell to infect Linux systems.

"Threat actors are increasingly using open source tools in their arsenals for cost-effectiveness and obfuscation to save money and, in this case, plausibly blend in with the pool of non-state-sponsored and often less technical adversaries (e.g., script kiddies), thereby making attribution even more difficult," Sysdig researcher Alessandra Rizzo said in a report shared with The Hacker News.

Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool