"BLOODALCHEMY Provides Backdoor to Southeast Asian Nations' Secrets"

Researchers discovered a backdoor being used in attacks against governments and organizations in the Association of Southeast Asian Nations (ASEAN). The backdoor, dubbed "BLOODALCHEMY" by Elastic Security Labs researchers, targets x86 systems and is part of the REF5961 intrusion set recently adopted by a China-linked group. The tooling of REF5961 has been observed in a different espionage-focused attack against the Mongolian government. BLOODALCHEMY is the new backdoor used by the operators of REF5961. However, even though experienced malware developers are believed to have worked on the program, it is still believed to be in development. This article continues to discuss the BLOODALCHEMY backdoor used against ASEAN governments and organizations.

The Register reports "BLOODALCHEMY Provides Backdoor to Southeast Asian Nations' Secrets"

Submitted by grigby1

Submitted by Gregory Rigby on