Cyber Operation Targets WeChat Users with Spyware

New cyber threat targets WeChat users with spyware. Researchers from Trend Micro have identified a cyber operation named Earth Minotaur that exploits vulnerabilities in the WeChat app to deliver spyware, specifically targeting the Tibetan and Uyghur communities in China. Utilizing the Moonshine exploit kit, the operation deploys a backdoor called DarkNimbus, capable of extensive data theft and device monitoring. The attacks often begin with deceptive messages that lure victims into clicking malicious links disguised as government announcements or news topics relevant to the targeted communities. Trend Micro emphasizes the importance of caution when clicking on links in suspicious messages and recommends keeping applications updated to mitigate risks associated with known vulnerabilities.