Dominic Jainy’s perspective on the intersection of artificial intelligence and cybersecurity provides a unique vantage point for understanding the latest maneuvers from China-nexus threat actors. With a deep background in machine learning and blockchain, Jainy is well-versed in how sophisticated software structures can be used to hide malicious intent. The discovery of the JadeProx cluster—uncovered through an exposed Alibaba Cloud server in Singapore—serves as a stark reminder that even the most disciplined actors can leave a digital trail. This operation targeted a wide swath of government, healthcare, and educational institutions across Asia and Latin America, utilizing a previously undocumented tool known as the TriBack Loader. Our conversation explores the technical nuances of this loader, the strategic targeting of public infrastructure, and the surprising reliance on aging vulnerabilities despite the high level of engineering found in their custom toolsets.
The interview covers the forensic trail left by the JadeProx operators, the mechanical evolution of the TriBack Loader through its four distinct builds, and the aggressive scanning of over 14,000 educational targets in Hong Kong. We also dive into the deceptive use of AI-themed phishing campaigns that impersonate popular platforms like Claude to gain a foothold in sensitive environments.
When state-sponsored actors like those in the JadeProx cluster target medical imaging systems in public hospitals or ministries of foreign affairs, what does this tell us about their ultimate objectives and the risks to public safety?
The targeting of a Vietnamese public hospital’s medical imaging system is a chilling reminder that no sector is off-limits when it comes to state-nexus espionage. By gaining access through a Java management interface, these operators didn’t just steal data; they sat silently within a critical infrastructure node that handles sensitive patient diagnostics. This isn’t just about intellectual property theft; it is about establishing a foothold where they can observe the internal workings of a nation’s social fabric. Similarly, the intrusion into Malaysia’s Ministry of Foreign Affairs and the outreach to the National Congress of Honduras suggest a broad mission to collect geopolitical intelligence. When you see 13 unique vulnerabilities being surfaced across 14,653 education-related URLs in Hong Kong, it becomes clear that their net is cast wide to catch any piece of data that could offer a strategic advantage.
The TriBack Loader is a sophisticated piece of work involving DLL sideloading and specific API calls. Can you walk us through how this loader functions to stay beneath the radar of modern security tools?
The TriBack Loader is a masterclass in staying quiet by using the “living off the land” philosophy through DLL sideloading. In most of the recovered builds, the operators pair a legitimate, signed executable with a malicious DLL and an encrypted payload file, often disguised as a .dat or .log extension. The DLL is where the magic happens; it reverses the payload’s bytes and applies a XOR operation with a rolling key to reveal the final shellcode. What is truly fascinating is the choice of Win32 calls used for execution, such as InitOnceExecuteOnce and TimerQueue, which are far less scrutinized by Endpoint Detection and Response systems than the typical CreateThread calls. They even went as far as using EtwpCreateEtwThread, an undocumented routine in ntdll, showing a deep, almost intimate knowledge of the Windows kernel designed specifically to bypass the watchful eyes of security software.
The operation utilized a very specific phishing campaign that impersonated the Claude AI platform. How effective are these AI-themed decoys in modern social engineering?
Using a fake Claude software site like claude-pro[.]com, which was registered on March 28, 2026, is a brilliant move because it capitalizes on the current global obsession with AI tools. Users are eager to download these applications, and by serving a malicious MSI installer that triggers a UAC prompt, the attackers trick the victim into doing the heavy lifting for them. Once the user clicks “yes,” the sideloading chain is dropped directly into the Windows Startup folder, ensuring that the Beagle backdoor regains persistence every time the machine reboots. This particular variant was clever enough to report back to a command-and-control server at license[.]claude-pro[.]com, blending in with legitimate traffic. It’s a sensory trap: the user thinks they are getting a cutting-edge productivity tool, but in reality, they are handing over the keys to their entire digital workspace.
There is a notable contrast between the custom engineering of the TriBack Loader and the use of vulnerabilities from 2018 and 2021. Why do you think such sophisticated actors are still relying on older exploits?
It is a classic case of “if it isn’t broken, don’t fix it,” as the operators targeted four specific CVEs—2018-11511, 2021-24139, 2021-31755, and 2021-32305—all of which carry a maximum CVSS base score of 9.8. These flaws in ASUSTOR ADM, Tenda routers, and WordPress plugins are old, but they remain incredibly effective because patching cycles in large institutions like hospitals or government agencies often lag years behind. Even though the Tenda bug has been on CISA’s Known Exploited Vulnerabilities catalog since late 2021, many systems remain exposed, providing a wide-open door for the JadeProx team. They save their “expensive” zero-day exploits for the hardest targets, while using these 2018-era keys to unlock the thousands of doors they found during their massive scan of 14,653 URLs. This tactical patience allows them to maintain a high volume of intrusions without burning their most valuable technical assets.
Given the technical fingerprints left behind on that Alibaba Cloud server, what should security teams be looking for to detect this specific cluster of activity?
Detection starts with a suspicious eye toward signed vendor binaries running from places they shouldn’t be, like temporary or user-writable directories, especially if they are accompanied by an encrypted .dat file. Security teams need to hunt for unexpected copies of files like hostfxr.dll or MpClient.dll and keep a sharp lookout for the specific persistence markers like ~del.vbs.bat or nested folders labeled CL######. It is also vital to block the specific infrastructure used by this group, including domains like gouvvbo[.]top and those clever lookalikes for security vendors like update-crowdstrike[.]com or update-sentinelone[.]com. Finally, any internet-facing Java application must be scrutinized, as the operators heavily leveraged these interfaces to plant the webshells that started their journey into the Vietnamese medical imaging servers.
What is your forecast for the evolution of China-nexus operations like JadeProx as they continue to refine their custom loaders?
I expect we will see a significant shift toward even more decentralized and fragmented tooling, where the components of a loader like TriBack are swapped in and out like modular blocks to frustrate attribution efforts. The use of undocumented Windows APIs will likely become a standard rather than an exception, as attackers seek to outpace the signature-based detection of EDR vendors. Furthermore, as AI continues to dominate the public consciousness, we will see a surge in malvertising campaigns that use highly polished, fake AI software as the primary delivery vehicle for backdoors. The line between a legitimate software update and a state-sponsored intrusion will become thinner than ever, requiring a zero-trust approach to every single executable that enters a corporate or government network.