#8
BleepingComputer
general
May 21, 2026 at 14:00 UTC
Chinese hackers target telcos with new Linux, Windows malware
By Bill Toulas
AI Summary
Chinese APT actors linked to cyber-espionage campaigns have been deploying two newly identified malware families — Showboat (Linux SOCKS5 proxy/backdoor) and JFMBackdoor (Windows) — against telecommunications providers in the Middle East and Central Asia since at least mid-2022. Lumen Technologies researchers found Showboat is a modular post-exploitation framework capable of spawning remote shells, transferring files, and proxying traffic. The shared tooling across multiple Chinese APT groups suggests coordinated infrastructure targeting strategic communications providers.
Relevance score: 75.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →