News on Medial

This top Microsoft Office alternative has been hijacked by Chinese hackers — and their malware is coming for your devices

Techradar · 1y

Chinese hackers known as Blackwood are hijacking legitimate software updates to distribute malware capable of stealing sensitive information. The hackers intercept the traffic between the server hosting the update and the target endpoint, using an implant in the victims' networks. The malware, called NSPX30, is a sophisticated tool that can log keystrokes, grab screenshots, exfiltrate data, steal chat logs, and more. While most victims appear to be in China, there have also been compromised devices in Japan and the UK. IT teams can refer to ESET's detailed report for indicators of compromise and protection measures.