A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.
Installed as an outsider, he engineered a comeback, shifting the company’s focus from a waning mainframe computer business ...