Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:tencent:windows:*:*:*:*:*:*:*:*

1 brief RSS
high threat

Tencent Sogou Input Method DNS Hijacking and DarkVigil Deployment

The threat actor SlippyNunchucks has been attributed to a DNS hijacking operation abusing insecure HTTP communications in Windows versions of the Sogou Input Method to deploy an implant called DarkVigil.

exploited SlippyNunchucks supply-chain dns-hijacking dll-sideloading cyber-espionage
1c 1i updated