Belgian security firm NVISO has discovered a Windows variant of the BRICKSTORM malware linked to Chinese espionage group UNC5221. The backdoor malware, used since 2022 for a European industrial espionage campaign, remains undetected for long periods and is used in both Windows and Linux environments. The malware abuses legitimate cloud services, encrypts network communication, and evades network monitoring through DNS over HTTPS.
Critical Open Source Easyjson Library Under Full Control of Russian Company
Researchers revealed that easyjson, a crucial Go package for JSON serialization, is controlled by Moscow-based developers from VK Group, raising significant security concerns. This foreign
