China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Cisco Talos identifies UAT-11587, a cluster targeting government and policy organizations in Taiwan, India, the Philippines and Cambodia. The activity delivers a previously undocumented backdoor called Antino, named in developer artifacts.
The campaign targets government and policy organizations across several Asian countries and uses a previously undocumented backdoor. Security teams serving those sectors can use the findings to assess exposure and strengthen monitoring.
