'Earth Minotaur' Exploits WeChat Bugs, Sends Spyware to Uyghurs

Trend Micro reports that an actor tracked as Earth Minotaur is using the Moonshine exploit kit to target vulnerabilities in instant-messaging apps (including WeChat) and Chromium-based browsers to deliver DarkNimbus — a comprehensive Android/Windows surveillance backdoor — to Tibetan and Uyghur users; the campaign uses social-engineered malicious links, updated exploit modules to hinder analysis, and enables wide-ranging data exfiltration (contacts, messages, calls, location, recordings, screenshots) and remote command execution.