Organizations across Japan have been subjected to attacks by Chinese state-sponsored threat operation Cuckoo Spear involving the LODEINFO and NOOPDOOR backdoors, reports The Hacker News. Attacks by Cuckoo Spear — which has been linked with APT10, also known as Stone Panda, Cicada, Bronze Riverside, ChessMaster, Cloudhopper, MirrorFace, and Purple Typhoon — may have involved the utilization of LODEINFO, which allows file theft, arbitrary shellcode execution, keystroke logging, process termination, and screenshot capturing, as an initial payload, according to a Cybereason report.
Source: SC Magazine