ThreatPaper

#dll-sideloading

2 cases

UAT-11587 deploys Antino backdoor using Microsoft 365 as dead-drop C2 against Asian governments

China-nexus actor UAT-11587 hit ~350 endpoints across 8 countries with Antino, a Rust backdoor that uses Outlook and OneDrive via Microsoft Graph for stealth C2, per Cisco Talos.

State-SponsoredMalware
FamousSparrow's SparroWocky Backdoor Targets Latin American Governments Amid US-China Rivalry

ESET Research documents SparroWocky, a new C++ backdoor from the China-aligned FamousSparrow APT that has almost exclusively targeted Latin American government organizations since mid-2025 — including an entity directly involved in Panama's contested port concession dispute.

State-SponsoredMalware