Chinese cyberspies breached dozens of telecom firms, govt agencies

Google Threat Intelligence, Mandiant, and partners disrupted a global espionage campaign (UNC2814) active since at least 2023 that targeted telecom and government networks in 42 countries using a C-based backdoor called GRIDTIDE; the malware abused the Google Sheets API for covert command-and-control and data operations, impacted 53 organizations, and included detailed TTPs and IoCs while remediation and sinkholing were performed.