New China-linked hacker group spies on governments in Southeast Asia, Japan

ESET uncovered a China-aligned APT called LongNosedGoblin targeting government institutions in Southeast Asia and Japan since at least September 2023; the group abuses legitimate Windows Group Policy to deploy malware families—NosyHistorian (browser-history collection), NosyDoor (backdoor), NosyStealer, NosyDownloader and NosyLogger—for targeted espionage and lateral movement, and some NosyDoor variants appear tailored to carefully selected machines.