A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.
The experienced team at Epilogue is taking a different approach with the upcoming release of the SN Operator, though, which ...