{"id":52606,"date":"2023-07-04T05:29:06","date_gmt":"2023-07-04T05:29:06","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/undiplomatic-chinese-threat-actor-attacks-embassies-and-foreign-affairs-departments\/"},"modified":"2023-07-04T05:29:06","modified_gmt":"2023-07-04T05:29:06","slug":"undiplomatic-chinese-threat-actor-attacks-embassies-and-foreign-affairs-departments","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/undiplomatic-chinese-threat-actor-attacks-embassies-and-foreign-affairs-departments\/","title":{"rendered":"Undiplomatic Chinese threat actor attacks embassies and foreign affairs departments"},"content":{"rendered":"

Infosec outfit Checkpoint says it’s spotted a Chinese actor targeting diplomatic facilities around Europe.<\/p>\n

Checkpoint has dubbed the campaign “SmugX” thanks to its use of HTML smuggling to deploy the PlugX remote access trojan.<\/p>\n

\"James<\/p>\n

Oh no, that James Webb Space Telescope snap might actually contain malware<\/h2>\n

READ MORE<\/span><\/a><\/div>\n

HTML smuggling is a method of attack that places malicious artefacts in a web page, so that they download when a human visits the site. It can be an effective attack because defenses don’t focus on finding threats in traffic to browsers.<\/p>\n

In this attack, infected sites deliver either a JavaScript or a ZIP file that contains a payload.<\/p>\n

Checkpoint spotted downloads including:<\/p>\n