Group Policy abuse reveals China-aligned espionage group targeting governments

ESET Research has identified a previously undocumented China-aligned advanced persistent threat group that uses Windows Group Policy to deploy malware and move through victim networks. The group, tracked as LongNosedGoblin, has targeted government institutions in Southeast Asia and Japan with a toolset built for long-term surveillance. Group Policy is widely used with Active Directory to manage settings and permissions across Windows environments. The group leverages that trust to distribute malware at scale once access is … More →

The post Group Policy abuse reveals China-aligned espionage group targeting governments appeared first on Help Net Security.