Taiwan University Under Fire From Unique DLL Backdoor

Symantec researchers identified a previously unseen backdoor dubbed Msupedge used in an attack on a Taiwanese university; the malware is delivered as DLLs placed at specific file paths, receives commands via DNS by interpreting the resolved C2 IP address, and may have exploited PHP CVE-2024-4577 for initial access.