Chinese Hackers Entrenched in US Telcom Networks, RAT-as-a-Service, New Antivirus Evasion Technique

Chinese state-sponsored hackers remain deeply embedded in U.S. telecom networks, including AT&T and Verizon, in what experts call an unprecedented breach. The Salt Typhoon campaign has compromised sensitive data like call metadata and surveillance systems, with no clear timeline for removal. Officials recommend using encrypted messaging apps like Signal and Session to safeguard communications.

Meanwhile, the Android banking Trojan DroidBot has shifted to a malware-as-a-service model, targeting banks, cryptocurrency exchanges, and national organizations. With advanced spyware features and global expansion plans, this RAT-as-a-Service operation is raising alarms.

Lastly, a clever new phishing tactic uses corrupted Office and ZIP files to evade antivirus tools and email filters, exploiting recovery mechanisms in programs like Word and Outlook to deliver malware.

Get insights into these emerging threats and practical tips to stay secure.

Looking to understand how these kinds of attacks might impact your environment?

We help teams uncover and fix real security issues — not just pass audits: https://asteros.com

See how our reports prioritize risk and cut through the noise: https://asteros.com/2025/03/what-makes-a-good-penetration-test-report/