Linux Backdoors Are Dressing Up as Your Email Security Software
Rapid7 found Linux implants in South Korea and Taiwan posing as products like SpamSniper and ShareTech, and using SMTP for command and control. Here is what was reported and what defenders can do about it.
What the Integrity Tech Advisory Tells Defenders About Chinese Email-Theft Operations
A joint advisory from CISA, the FBI, NSA and international partners details how actors enabled by Integrity Technology Group scan, spray passwords, persist through SoftEther VPN, and quietly pull email. Here is what I would act on first.