Zombie Zero Underscores Supply Chain Threat

TrapX Security reported that a malware family dubbed "Zombie Zero" was shipped embedded in the OS images of shipping scanners from a Chinese manufacturer, infecting 16 of 64 devices at one logistics customer and variants found on scanners sold to eight other firms (including a large robotics company). The malware, described as sophisticated and possibly state-sponsored, connected to victims' wireless networks, attacked finance and ERP systems, copied inventory and manifest data, allowed modification of shipping operations, and linked compromised networks to a China-based botnet C2 (Lanxiang Vocational School).