Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

A China-nexus threat actor is behind a new espionage campaign targeting government and policy organizations in several Asian countries. The campaign has affected organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar. The threat actor is using a previously undocumented backdoor called Antino. Cisco Talos is monitoring the activity, which is part of a cluster of related threats. The Antino backdoor utilizes Outlook and OneDrive for command and control purposes.