Antino

Cisco Talos Identifies Antino Backdoor Leveraging Outlook and OneDrive in China-Nexus Espionage Campaign

Cisco Talos has uncovered a new cyberespionage campaign attributed to a China-nexus threat actor. The operation deploys a previously undocumented backdoor codenamed Antino, which specifically targets government and policy organizations across Asia. The backout leverages legitimate Microsoft services, including Outlook and OneDrive, for command and control communication, making detection more difficult. Victims have been identified in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar.