Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP).
Summary
The campaign, observed starting July 1, 2026, is assessed to have targeted organizations and
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Perimeter infrastructure like VPNs, firewalls, and routers needs the same ongoing scrutiny as anything user-facing, it's frequently the oldest, least-monitored layer of the stack, and a popular target precisely because of that.
We help organizations find and fix the gaps before they make headlines.
Coverage details