Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks

The Chinese nation-state group dubbed Alloy Taurus is using a Linux variant of a backdoor called PingPull as well as a new undocumented tool codenamed Sword2033.
That's according to findings from Palo Alto Networks Unit 42, which discovered recent malicious cyber activity carried out by the group targeting South Africa and Nepal.
Alloy Taurus is the constellation-themed moniker assigned to a

africa alloy alloy taurus alto backdoor called chinese chinese hackers cyber cyberattacks findings hackers linux malicious nation nepal networks palo palo alto palo alto networks pingpull south south africa state targeting tool unit 42