Torrent of Threats: China-Nexus APT UAT-9244 Hijacks South American Telecoms with PeerTime Backdoor

**Executive summary:** Cisco Talos attributes a China-linked APT dubbed UAT-9244 to an ongoing espionage campaign (active since at least 2024) against South American telecommunications providers, using a suite of sophisticated tools—TernDoor (Windows DLL-sideloading backdoor), PeerTime (ELF backdoor that hides C2 in BitTorrent traffic), and BruteEntry (edge-device brute-force scanner/relay)—to compromise edge devices, harvest credentials, enable lateral movement, and maintain stealthy, long-term access to critical infrastructure.