UAT-10147 Threat Actor Deploys SPECTRE Backdoor with AI and EDR Bypass Techniques

UAT-10147, a Chinese-speaking threat actor, is reported to use the SPECTRE backdoor and a Linux rootkit to perform sophisticated multi-platform attacks and employs BYOVD to bypass EDR protections; Cisco Talos analysis highlights AI-assisted code generation and recommends isolating affected servers and conducting kernel-level forensic analysis to prevent lateral movement.