Suspected Chinese State-Sponsored Hackers Target Russian Submarine Designer With PortDoor Malware

The hacking group suspected to be supported by the Chinese government is targeting the company that designs submarines for the Russian Navy using PortDoor malware to infiltrate the company's systems. Hackers managed to lure the company's general director with the document specifically crafted for bait purposes, containing a general description for an autonomous underwater vehicle. Security researchers have discovered that the RTF file had been weaponized using RoyalRoad, a tool for building malicious documents to exploit multiple vulnerabilities in Microsoft’s Equation Editor. Read more...