China-nexus Antino backdoor targets Asian governments via Outlook and OneDrive

2026-10-04 · Cybersecurity · Taiwan · India

A previously undocumented backdoor dubbed Antino is being deployed against government and policy organizations across Asia, including Taiwan, India, the Philippines, Thailand and Pakistan, using Outlook and OneDrive as command-and-control channels. The campaign is attributed to a China-nexus threat actor.

Why it matters：The campaign affects government and policy organizations and shows how espionage groups are hiding inside common cloud services to maintain persistent access.

Key points

• Targets include Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand and Myanmar
• Command-and-control traffic rides on Outlook and OneDrive
• The backdoor had not been documented before

Sources (original reporting)

• The Hacker News

More stories from this day

• Musk confirms Terafab in talks with TSMC over Texas chip plant
• Indian Filmmaker Singeetham Srinivasa Rao Dies at 95
• Taiwan says US policy unchanged as $14bn arms package stalls
• China-linked Warlock ransomware exploits SharePoint flaws in critical-infrastructure attacks
• GitLab warns of critical 9.9 AI Gateway flaw allowing command execution
• Technical University of Denmark breach may expose data of 200,000 people