China-aligned group abuses Sogou Input Method to deliver DarkVigil backdoor
THREAT ACTORDarkVigilredteam/daily · 1 source
- Severity
- High
- Highest CVSS
- 8.9
- Exploited
- Not known
- Sources
- 1
What happened
A hacking group linked to China used a popular Chinese typing app to secretly install a hidden backdoor on Windows computers. The attackers redirected the app's update requests to their own servers, so no software flaw had to be exploited. The fix is to update the app to version 16.10 or later.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Update Sogou Input Method to version 16.10 or later.
- Check router DNS settings for signs of tampering.
- Look for connections to the listed DarkVigil domains and IP addresses in your logs.
- Search Sogou's Components folder for unexpected Adobe-named files.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Threat actors
Malware
Products