From Cybersecurity Help – China-linked MirrorFace APT targets Japan with ANEL backdoor

Vulnerabilities

From Cybersecurity Help – China-linked MirrorFace APT targets Japan with ANEL backdoor

shaikh Saqib March 18, 2025

The group has changed its TTPs, returning to the ANEL backdoor, previously believed to have been abandoned after 2018.

advanced persistent threat tactics ANEL backdoor revival APT malware execution chains APT10 subgroup AsyncRAT Windows Sandbox breaches Central European diplomatic target China-aligned threat actor cyber awareness cyber defense cyber protection cyberattacks cyberespionage Japan Europe cybersecurity cybersecurity espionage campaign data leaks digital privacy diplomatic cybersecurity threats hacks HiddenFace backdoor infosec LNK file malware delivery McAfee signed executable abuse MirrorFace APT MirrorFace targeting strategies.network security note online security Operation AkaiRyū RedDragon cyberespionage security incidents security perspective spearphishing Expo 2025 threat threat intelligence threat note threatnote VS Code remote tunnels cyberattack

Last updated on March 19, 2025