Where: Global, with focus on exposed networking devices
When: Published July 8, 2026
What happened: Cisco Talos reported that China-linked UAT-7810 is expanding the LapDogs operational relay box network by compromising internet-facing networking devices. The group is using updated LONGLEASH malware and related tools to turn routers and embedded devices into relay infrastructure for follow-on espionage operations.
China-linked UAT-7810 expands ORB network with LONGLEASH malware
Edward Kiledjian
@ekiledjian