New Linux malware variants leveraged in Chinese cyberespionage campaign

BleepingComputer reports that Chinese state-backed threat operation Gallium, also known as Alloy Taurus, has leveraged an updated PingPull malware variant and the novel Sword2033 in new attacks aimed at Linux systems in South Africa and Nepal.

africa alloy alloy taurus attacks bleepingcomputer campaign chinese cyberespionage gallium linux linux malware malware nepal novel pingpull reports south south africa state systems threat threat intelligence