Sunday 19 July 2026 17:55:21 GMT+02:00
Netcrook
#UAT-7810
When a Router Becomes a Relay: The Quiet Expansion of UAT-7810's Malware Mesh
A China-linked cluster tracked by Cisco Talos is being tied to a newer implant, LONGLEASH, as part of a broader effort to grow an ORB network from internet-facing networking devices.
When Routers Become Cover: The Quiet Expansion of a Stealth Relay Network
A campaign tied to UAT-7810 highlights how exposed edge devices can be repurposed into anonymous traffic relays, turning routine patch debt into operational cover for high-risk intrusions.
LONGLEASH Turns a Backdoor Into a Relay Engine
The malware’s value is no longer just access: its newer functions point to compromised infrastructure that can proxy traffic, relay commands, and widen the attacker’s control options.