China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-23 12:20 UTC
Importiert: 2026-07-29 13:59 UTC
Quelle-ID: thn_global
uid_hash: 8c92c9b9774aeabac2c82fab41f2f471d9c7a1d78c70d2b560e2b9bb45f71d09

The Hacker News

Inhalt

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader.

Group-IB found the server in mid-April 2026 in Alibaba Cloud's Singapore region; it was offline by the time the report

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste