Antino Backdoor Abuses Outlook, OneDrive for C2 in Asia Espionage

· Cybersecurity · Taiwan · India

A China-nexus threat actor is deploying a previously unseen backdoor called Antino against government and policy organizations across Asia, using Outlook and OneDrive for command-and-control. Targets include Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand and Myanmar, according to threat researchers.

Why it matters：Living-off-trusted-services tradecraft makes detection harder and signals continued state-sponsored espionage against public-sector networks.

Key points

  • The campaign uses legitimate Microsoft services to blend in with normal traffic.
  • Victims are concentrated in government and policy organizations.
  • The backdoor was previously undocumented.

Sources (original reporting)

More stories from this day