<ul><li>China-linked APT Gelsemium has deployed a new Linux backdoor called WolfsBane in attacks targeting East and Southeast Asia.</li><li>The backdoor WolfsBane is a Linux version of Gelsevirine, a Windows backdoor previously used by Gelsemium APT.</li><li>The shift to targeting Linux reflects APT groups adapting to enhanced Windows defenses and focusing on vulnerabilities in internet-facing Linux systems.</li><li>The initial access method used by Gelsemium APT is still unclear, but researchers believe web application vulnerabilities were exploited.</li></ul>

China-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBane

Discover more