
The severity and frequency of state-sponsored cyberattacks have drastically surged, with a notable resurgence in activity from a Chinese state-backed hacking group. Tracked as UNC5174, this group has emerged from a period of dormancy to launch sophisticated cyberattack campaigns, prominently featuring a fileless remote access Trojan (RAT) known as VShell. Operating exclusively in memory, VShell leverages advanced evasion techniques and