China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
Tag: Operation Highland
Velvet Ant: China-Linked Cyber Espionage Group
Velvet Ant, tracked by Sygnia, is a China-nexus threat actor known for targeting infrastructure components like F5 BIG-IP, Cisco NX-OS, and Linux…
Operation Highland: Velvet Ant’s Long-Term Linux Login Backdoor Campaign
Operation Highland is a campaign by the China-linked Velvet Ant group that backdoored Linux PAM and OpenSSH components to maintain persistent access…