"From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese"

Tibetan, Uyghur, and Taiwanese individuals and organizations are being targeted by a persistent campaign aimed at stealing sensitive information. According to security researchers at Volexity, the attacker has developed fake Tibetan websites and social media profiles to launch browser-based exploits against targeted users. To help spread their malware, the attacker has formed communities on online platforms such as Telegram, partly by impersonating existing popular communities. EvilBamboo, previously tracked by the cybersecurity company under the name Evil Eye, has been linked to multiple attack waves since at least 2019. The threat actor used watering hole attacks to deliver spyware to Android and iOS devices. This article continues to discuss the latest findings regarding EvilBamboo's malicious campaign.

THN reports "From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese"

Submitted by grigby1