Chinese Hacking Group MirrorFace Targeting Europe - SecurityWeek

Chinese hacking group MirrorFace, linked to APT10, targeted a Central European diplomatic institute using updated tactics and new tools, including the Anel backdoor and AsyncRAT. The attacks, part of Operation AkaiRyū, aimed to gain network access and steal data, with the upcoming Expo 2025 event used as a lure. This marks the first known MirrorFace attack against a European entity, highlighting the group’s expanding geographic focus beyond Japan.