When a Router Becomes a Relay: The Quiet Expansion of UAT-7810's Malware Mesh

A China-linked cluster tracked by Cisco Talos is being tied to a newer implant, LONGLEASH, as part of a broader effort to grow an ORB network from internet-facing networking devices.