China-linked SlippyNunchucks uses DNS hijacking to deliver DarkVigil implant
The operation abuses insecure HTTP communications in Windows versions of Sogou Input Method to deliver the DarkVigil surveillance implant.
3 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoThe operation abuses insecure HTTP communications in Windows versions of Sogou Input Method to deliver the DarkVigil surveillance implant.
3 min readThe attackers injected malicious JavaScript code into websites to identify visitors' devices, operating systems, and browser versions.
3 min readThe attackers used a combination of open-source tools, custom malware and AI to compromise networks and maintain access.
2 min readThe malware allowed attackers to remotely control infected devices, install additional applications, and execute shell commands.
3 min readTracked as CVE-2026-58115, the vulnerability allows attackers to access vulnerable systems without authentication.
2 min read