Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel
China-linked UAT-11587 used the Antino backdoor and Microsoft 365 to spy on Asian governments.
78
Malware
Antino
- Mentions · 7d0
- Mentions · 30d3
- All mentions4
- First seenAug 15, 2026
- Last mentioned27d ago
Timeline
4 articles · newest firstAntino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Cisco Talos says China-nexus UAT-11587 deployed the Antino backdoor against Asian government and policy organizations.
78
Researchers find Chinese hacking campaigns targeting AI firms, Asian governments
Chinese state-backed groups phished AI researchers and used the Antino backdoor against Asian governments, hitting about 350 endpoints.
76
China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud
China-linked Jewelbug runs government espionage and crypto fraud from a single XG-Web browser-based control framework.
76
Appears with
- Cisco Talosorganization · 3
- OneDriveproduct · 3
- Earth Aluxthreat actor · 2
- UAT-11587threat actor · 2
- Microsoft Graphproduct · 2
- CL-STA-0049threat actor · 2
- Symantecorganization · 2
- Ink Dragonthreat actor · 2
- Outlookproduct · 2
- REF7707threat actor · 2
- Microsoft 365product · 2
- Microsoftvendor · 2
- Jewelbugthreat actor · 2
- ClientKingproduct · 1
- UNC6384threat actor · 1
- Broadcomorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.