China-linked Alloy Taurus APT uses a Linux variant of PingPull malware

China-linked threat actor tracked as Alloy Taurus is using a Linux variant of the PingPull backdoor and a new tool dubbed Sword2033. Researchers from Palo Alto Networks Unit 42 recently observed the China-linked Alloy Taurus group  (aka GALLIUM, Softcell) targeting Linux systems with a new variant of PingPull backdoor. While investigating the activity of the group, the […]

The post China-linked Alloy Taurus APT uses a Linux variant of PingPull malware appeared first on Security Affairs.

actor alloy alloy taurus alto apt backdoor china gallium hacking intelligence it information security linux malware mobile networks palo palo alto palo alto networks pierluigi paganini pingpull researchers security systems targeting threat threat actor tool unit 42