Chinese Weaver Ant hackers spied on telco network for 4 years

Weaver Ant, a China-linked APT, operated for more than four years inside a major Asian telecom provider by compromising Zyxel CPE routers and deploying web shells (China Chopper variants and a custom INMemory DLL-based loader) to create a covert internal proxy network (‘web-shell tunneling’), enabling stealthy credential harvesting, lateral movement, and passive data collection for sustained espionage.