Analista de Inteligencia de Amenazas: 2026-09-30

1. China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

   Cisco Talos, 2026-09-30. Leer, 27 min.

   Cisco Talos tracks UAT-11587, a cluster it assesses with high confidence is China-nexus, targeting government and policy organizations across Asia, and by July 2026 it had identified at least 16 affected or targeted institutional environments across eight Asian countries. One recurring final payload is a previously undocumented Rust backdoor Talos calls Antino, and a recurring delivery branch began with spear-phishing emails and tailored decoy documents.

   Por qué importa para este rol: Keep UAT-11587 as its own activity set in your tracking rather than folding it into Symantec's Jewelbug, since Talos saw overlaps but could not verify a link to Jewelbug's financially motivated activity.

Analista de Inteligencia de Amenazas