CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Events

Operation Highland: Velvet Ant’s Long-Term Linux Login Backdoor Campaign

June 25, 2026

Operation Highland is a campaign by the China-linked Velvet Ant group that backdoored Linux PAM and OpenSSH components to maintain persistent access for nearly a decade, targeting isolated networks.