China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP).
The campaign, observed starting July 1, 2026, is assessed to have targeted organizations and
The post “China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor” appeared first on The Hacker News
Source:The Hacker News – [email protected] (The Hacker News)