Tag: darkvigil
1 article

SlippyNunchucks Exploits Sogou Input Method in DNS Hijacking Push for DarkVigil Backdoor
Meet SlippyNunchucks, a China-aligned actor that's been secretly deploying a sneaky backdoor called DarkVigil to Chinese-speaking users across Asia and beyond, by exploiting a popular Chinese input method. This stealthy operation has been active since September 2023, using a modular .NET framework to spread the DarkVigil backdoor and its arsenal of 20+ plugins.