The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cryptocurrency fraud. "Both missions are administered from a single control panel, XG-Web, a browser-centric remote-access and information-stealing framework that turns a victim's browser into a full…
China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud
Summary + source link. No paywalls, no tracking.