Carderbee Attacks: Hong Kong Organizations Targeted via Malicious Software Updates

A previously undocumented threat cluster has been linked to a software supply chain attack targeting organizations primarily located in Hong Kong and other regions in Asia.
The Symantec Threat Hunter Team, part of Broadcom, is tracking the activity under its insect-themed moniker Carderbee.
The attacks, per the cybersecurity firm, leverage a trojanized version of a legitimate software called

asia attack attacks broadcom cluster cybersecurity hong kong hunter kong malicious malicious software organizations software software supply chain software supply chain attack software updates supply supply chain supply chain attack symantec targeting team threat tracking under updates