Date of report
- August 2022
Affiliations
Chinese hackers used phishing emails to plant PortDoor malware on the systems of industrial organizations in Afghanistan, Belarus, Russia, and Ukraine. Security researchers detected the hackers exfiltrating data to a server with a Chinese IP address.
Suspected victims
- Industrial plants, design bureaus, research institutes, and government organizations in Afghanistan, Belarus, Russia, and Ukraine.
Suspected state sponsor
- China
Type of incident
- Espionage
Target category
- Government
- Private sector