threat-intel
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
High
Summary
A threat actor linked to East Asia has been targeting government entities in the Middle East using a sophisticated attack chain leveraging Telegram for command-and-control. The campaign utilizes malware families like TELESHIM, MIXEDKEY, and BINDCLOAK, employing advanced techniques such as code obfuscation and EDR evasion to maintain persistent access and deploy secondary payloads.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data