Stealthy BLOODALCHEMY Malware Targeting ASEAN Government Networks

Researchers report that BLOODALCHEMY is an updated Deed RAT/ShadowPad‑related backdoor used in espionage campaigns targeting government organizations in Southern and Southeastern Asia; it employs DLL side‑loading (BrDifxapi.exe/BrLogAPI.dll), in‑memory shellcode extracted from DIFX files, and run‑modes to evade analysis and manage persistence, and its code overlaps suggest reuse of centralized tooling among China‑linked actors.