SecurityThe Hacker Newsabout 2 hours ago
China Hackers Hijack Sogou DNS for Spyware
3 min read
China-aligned threat actor SlippyNunchucks hijacked Sogou Input Method DNS requests to deploy DarkVigil malware since September 15, 2023. The campaign targeted Chinese-speaking users in Hong Kong, Thailand, Japan, Vietnam, Oman, and Sri Lanka. Tencent patched the vulnerability CVE-2026-120422 on October 29, 2026, by migrating HTTP requests to HTTPS.
Level
Hype check
Tap to vote and see what everyone thinks.
