Security · 2h ago
Chinese APT UAT-7810 Deploys New LONGLEASH Malware to Hijack Routers
Chinese threat actor UAT-7810 is expanding its ORB network by infecting internet-facing networking devices with a new malware called LONGLEASH. Cisco Talos reports the group maintains the LapDogs ORB network, first identified in June 2025. The malware enables persistent access for cyber espionage operations.
Meridian48 take
While the malware is new, the playbook—targeting edge devices for relay networks—is a familiar tactic that underscores the growing risk of compromised networking hardware.
Read the full reporting
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware →
The Hacker News
aptmalware