China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware

A Chinese threat actor known as UAT-7810 is enhancing its custom malware to grow its Operational Relay Box network by compromising internet-facing networking devices. UAT-7810 is an advanced persistent threat actor that maintains and expands the LapDogs ORB network, which was first identified in June 2025. This actor is refining its malware to support the expansion of the network. The threat actor's activities were uncovered by Cisco Talos. UAT-7810's efforts are focused on breaking into networking devices that are connected to the internet. The LapDogs ORB network is a key part of the threat actor's operations.