
For approximately five years, a covert Chinese cyberespionage group has quietly targeted organizations and individuals in China and Japan, remaining undetected by cybersecurity experts and law enforcement agencies. This article sheds light on the sophisticated tactics employed by this group, including their utilization of adversary-in-the-middle (AitM) attacks to deploy a powerful implant through legitimate software update mechanisms. Adversary-in-the-Middle Attacks and









