Tag: mfa bypass is not relevant here but state sponsored

Google Warns of China Espionage Actor Exploiting BeyondTrust Flaw

Google warns that a suspected China state-sponsored espionage actor, known as Armory Castle, has been actively exploiting a critical BeyondTrust Remote Support vulnerability, rated 9.3 on the CVSS scale, since August 2026. This group has a history of long-term intelligence collection for the People’s Republic of China, targeting industries from legal services to government agencies.