China-Linked Cyber Spies Blend Watering Hole, Supply Chain Attacks

Evasive Panda, a China-linked APT, ran a targeted campaign beginning in or before September 2023 that compromised Tibetan-focused websites and a Tibetan translation developer to deliver droppers and backdoors (MgBot and Nightdoor) via watering-hole, supply-chain/software-update, and phishing vectors; victims across India, Taiwan, Australia, the U.S., Hong Kong and others were impacted, and the activity demonstrates high technical sophistication and multiple attack vectors.