Threats Tagged 'azure cloud c2'

Operation Dragon Weave is a medium-severity cyber-espionage campaign linked to China-based threat actors targeting officials and citizens in Czech Republic and Taiwan. The campaign uses spearphishing emails with malicious ZIP archives that deploy a multi-stage infection chain culminating in the AZUREVEIL Adaptix C2 agent. This malware uses Microsoft Azure Blob Storage as a command-and-control channel, evading traditional detection methods. The infection chain includes RUSTCLOAK, a Rust-based loader with triple-layer encryption. The final payload supports extensive post-exploitation capabilities such as in-memory Beacon Object File execution, file and process manipulation, network pivoting, and data exfiltration. Lure documents mimic official communications from regional institutions to enhance social engineering effectiveness.

MediumMalwareCzechiaTaiwan#china-linked#taiwan#dll sideloading