DarkSpectre: Chinese Threat Actor Behind Browser Extension Malware

DarkSpectre is a Chinese threat actor linked by Koi Security to the StegoAd campaign. It has been active since at least 2021, using steganography to hide malware in browser extensions. The group is also associated with the ShadyPanda and GhostPoster extension campaigns.