China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials

Bronze Sandcastle Uses Sandboxie DLL Sideloading In Asia Attacks

Researchers have identified a China-aligned threat cluster named Bronze Sandcastle targeting organizations in Asia and Africa since mid-2025. The group […]

China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials

China-linked hackers are using trusted Windows applications to load hidden backdoors, collect system details, and steal Active Directory credential data. The group, tracked as BRONZE SANDCASTLE, places malicious files beside legitimate software, allowing familiar programs to run attacker-controlled code without changing the original application. The campaign shows how genuine software can become part of an […]

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. "The most distinctive technical marker for Bronze Sandcastle is its consistent use of Sandboxie DLL sideloading," Sophos security researcher Gabor Szappanos said in a post published

China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors

Sophos found BRONZE SANDCASTLE abusing legitimate Windows apps to load encrypted backdoors, collect system information and steal Active… This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors The post China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors appeared first on IT Security News.