FishMonger, a China-nexus threat group, has deployed an undocumented version of the Linux backdoor against government targets in Honduras, Taiwan, Thailand, and Pakistan.
SprySOCKS Windows Variant Abuses Kernel Drivers to Evade Detection
Summary + source link. No paywalls, no tracking.