Operation QUICSILVER Targets Myanmar Government and IT Sectors with QUICAgent Backdoor

Seqrite Labs has attributed a new cyber espionage campaign, codenamed Operation QUICSILVER, to a China-nexus threat actor targeting government and information technology sectors in Myanmar. The attack chain begins with lures themed around graduation ceremonies, which deliver a malicious payload resulting in the execution of QUICAgent, a backdoor developed in the Go programming language.

The use of graduation ceremony invitations as social engineering bait suggests the actor is targeting specific individuals or organizations with tailored phishing content. Once executed, QUICAgent provides the threat actor with remote access capabilities, enabling cyber espionage operations against critical government and IT infrastructure.

The activity has been assessed with moderate confidence as originating from a China-nexus actor, based on available intelligence and tracking by Seqrite Labs. The report notes that specific impact extent has not been disclosed, but the targeting of government and IT sectors raises concerns regarding data exfiltration and system compromise.

Operation QUICSILVER highlights the continued use of socially engineered lures and custom malware in targeted cyber espionage operations. Security teams are advised to exercise caution with unsolicited invitations and links, and to maintain updated security software to detect and block such threats.