China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
New TriBack malware reveals how threat actors exploit cloud infrastructure to target global public institutions.
An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader. G...
The Hacker News
Source
Generated insight by OnAirToday AI
The discovery of the TriBack Loader highlights the growing sophistication of state-aligned threat actors leveraging cloud infrastructure to maintain persistence within global critical sectors. This operation underscores the urgent need for enhanced cross-border threat intelligence to mitigate risks against vulnerable government and healthcare networks.
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.