SecurityScorecard exposes "LapDogs," a China-linked ORB network of over 1,000 compromised SOHO devices (Linux/Windows) used for covert, long-term cyber intelligence operations.

จากการที่ผมได้มีโอกาสเข้าไปรวมกลุ่มเฉพาะกิจเพื่อตรวจสอบ Security ของ Orb ในงาน Orb Technical Deep Dive วันที่ 19 กันยายน 2568 มีอะไรหลาย ๆ…

XLab exposed RPX_Client, a new PolarEdge malware that turns IoT/router devices into a global ORB proxy network. The ELF binary uses XOR to encrypt config and spreads across 40 countries.

Cisco Talos has pulled the curtain back on UAT-7290, a threat actor operating out of the China-nexus since at least 2022. Specializing in stealth and persistence, this group has been systematicall…

The Cisco Talos intelligence unit has reported a significant geographical expansion in the activities of a threat actor utilizing sophisticated Linux malware to target telecommunication entities. …

At a glance Actor UAT-7810 — assessed China-nexus APT (Cisco Talos, high confidence) Activity Building and expanding the LapDogs ORB relay network with router malware Targets Unpatched edge device…

At a Glance Malware family BPFDoor variants, a BPF-enabled Rekoobe build, a dropper, and six AVERAT builds Threat actor Not named by Rapid7; infrastructure matches China-nexus covert network patte…