China-Linked APT Expands Proxy Network With New Malware

Cisco Talos attributes a China-linked APT (UAT-7810) with operating a large ORB relay network called LapDogs that hijacks routers and edge devices—using known but unpatched Ruckus and ASUS vulnerabilities—to provide proxy infrastructure for other espionage actors. Talos uncovered active custom tooling (LONGLEASH backdoor with proxying, DOGLEASH for Linux, JARLEASH Java server-management tool) and development artifacts for MIPS devices, indicating ongoing refinement and active servers.