China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks

**Executive summary:** Cisco Talos attributes a sustained China-linked espionage campaign (tracked as UAT-9244) targeting South American telecommunications since 2024, deploying three previously undocumented implants — TernDoor (Windows DLL sideloading backdoor with an embedded driver), PeerTime (multi-architecture Linux/embedded P2P backdoor using BitTorrent and in-memory execution), and BruteEntry (Golang-based brute-force scanner installed on edge devices) — along with supporting scripts and infrastructure used to brute-force and pivot within networks.