China-aligned hackers hijack Sogou Input Method DNS requests to deploy DarkVigil backdoor
THREAT ACTORredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A hacking group linked to China redirected internet lookups made by Sogou Input Method, a popular Chinese typing app on Windows, because the app sends some data without encryption. The attackers used this to install a spying program called DarkVigil on targeted computers.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether Sogou Input Method is installed on Windows systems in your environment.
- Review DNS and HTTP traffic from Sogou Input Method for signs of redirection to unexpected hosts.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News