Hackers deployed Falcon, a Node.js command-and-control framework tracked as XG or Xiàng Gē, against government entities in one Middle Eastern country and four Southeast Asian countries between March and May 2026. Unit 42 identified targets spanning foreign affairs, defense, interior, and law enforcement organizations, indicating strategic intelligence collection. The framework executes malicious JavaScript inside compromised […]
Read the original article:
Hackers Use Falcon C2 Framework to Hijack Browsers and Steal Credentials From Government Agencies
