Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs

Researchers observed a targeted campaign—linked to an actor with similarities to APT41—using two stealthy techniques (GrimResource, leveraging a six-year-old APDS XSS to execute JavaScript from MSC files, and AppDomainManager Injection to load malicious .NET DLLs) to drop Cobalt Strike via spearphishing ZIPs against Taiwanese government agencies, the Philippine military, and Vietnamese energy organizations; defenders are advised to emphasize email hygiene and pre-execution blocking controls.