Chinese hackers develop LONGLEASH malware to expand ORB network

UAT-7810, a China-aligned actor, is actively expanding an ORB relay infrastructure by exploiting known vulnerabilities in internet-facing routers (including Ruckus and ASUS devices) and deploying upgraded toolsets—LONGLEASH (an enhanced backdoor/proxy/C2), DOGLEASH (Linux backdoor), JARLEASH (Java admin tool), and LEASHTEST (MIPS testing utility)—to proxy traffic, evade detection, and support other regional APT operations.