A sophisticated cyberattack campaign is targeting Chinese-speaking users with weaponized fake versions of popular apps such as Signal, Line, and Gmail. The apps, distributed via deceptive download pages, contain malware that alters system defenses, evades detection, and steals sensitive data. The attackers use search engine manipulation to push fraudulent websites that mimic legitimate software sources, tricking users into downloading compromised files.

Salt Typhoon used custom malware JumbledPath to spy on U.S. telecom providers
China-linked APT group Salt Typhoon has been using a custom malware named JumbledPath to spy on US telecom providers. Insikt Group highlighted that several US