Skip to content
Threat Feed
Subscribe

Actor

SlippyNunchucks

1 brief RSS
high threat

Tencent Sogou Input Method DNS Hijacking and DarkVigil Deployment

The threat actor SlippyNunchucks has been attributed to a DNS hijacking operation abusing insecure HTTP communications in Windows versions of the Sogou Input Method to deploy an implant called DarkVigil.

exploited SlippyNunchucks supply-chain dns-hijacking dll-sideloading cyber-espionage