Threat Source newsletter (Aug. 22)
Summary: Cisco Talos reports that China Chopper, a nine-year-old web shell whose source code is now public, is more prevalent than ever, with three distinct campaigns discovered using it for malicious activity. Talos also found threat actors using the Orcus RAT and RevengeRAT to target government entities, financial services organizations, IT service providers and consultancies.
Bottom line: China Chopper's leaked source code means any threat actor can now wield a nine-year-old tool that still works, and the same actors are pairing it with two popular RATs against government and financial targets.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026