China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

T2Covered by 1 source · first reported by The Hacker News at 04 Nov, 11:24 UTC

A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP)…

security

Sources

• T2China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil BackdoorThe Hacker News04 Nov, 11:24