Chinese Backdoor Zegost Delivered Via Hacking Team

**Executive Summary:** Zscaler ThreatLabZ observed a drive-by campaign delivering the Zegost backdoor via the Hacking Team Adobe Flash exploit (CVE-2015-5119) from compromised Chinese websites and URL shorteners; the report details the infection chain, payload iterations (with MD5s), persistence mechanisms (DLL hijack, registry run key and service), and Command-and-Control indicators (domain, IP, port).