Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

The China-linked threat actor known as Evasive Panda orchestrated both watering hole and supply chain attacks targeting Tibetan users at least since September 2023.
The end of the attacks is to deliver malicious downloaders for Windows and macOS that deploy a known backdoor called MgBot and a previously undocumented Windows implant known as Nightdoor.
The findings come from ESET, which

actor attacks backdoor called china chinese deploy end evasive evasive panda hackers macos malicious panda september state supply supply chain supply chain attacks target targeting threat threat actor undocumented watering hole watering hole attacks windows windows and macos