China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
Read with caution - this story is only being covered by one news source that has a ‘low factuality’ rating, which means the outlet has a history of poor reporting practices. Learn more about factuality ratings here.4 Articles
4 Articles
This article addresses the cyber-threats posed by the SlipbyNunchucks group, and how it was used for the Sogou Input Method application to disseminate DarkVigil's malware software. Coordinated hacks by pirates associated with China. The ratio of a group of threats known as SlipbyNunchucks to the DNS hacking operation exploits unsafe HTTP communications in Windows versions of Sogou Input Method as part of the campaign... the article appeared as S…
Chinese-linked hackers compromised the Sogou Input Method's DNS requests, deploying the DarkVigil backdoor. DNS traffic is a critical layer for security teams to monitor.
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP). The campaign, observed starting July 1, 2026, is assessed to have targeted organizations and
Coverage Details
Bias Distribution
- 100% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
