Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Cisco Talos says China-nexus UAT-11587 deployed the Antino backdoor against Asian government and policy organizations.
78
Threat actor
Earth Alux
- Mentions · 7d0
- Mentions · 30d1
- All mentions2
- First seenAug 15, 2026
- Last mentioned28d ago
Timeline
2 articles · newest firstChina-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud
China-linked Jewelbug runs government espionage and crypto fraud from a single XG-Web browser-based control framework.
76
Appears with
- Ink Dragonthreat actor · 2
- Jewelbugthreat actor · 2
- REF7707threat actor · 2
- CL-STA-0049threat actor · 2
- Antinomalware · 2
- Carbon Blackvendor · 1
- ClientKingmalware · 1
- Symantecorganization · 1
- Elastic Security Labsorganization · 1
- Outlookproduct · 1
- Broadcomorganization · 1
- OneDriveproduct · 1
- Cisco Talosorganization · 1
- Check Pointorganization · 1
- Broadcomvendor · 1
- PDF Viewerproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.