BeyondTrust Remote Support Zero-Day Exploited by China-Linked Espionage Group Since August
A critical flaw in BeyondTrust Remote Support was exploited as a zero-day for weeks before a fix shipped, according to disclosures released this week by BeyondTrust and by Google Threat Intelligence Group and Mandiant. Investigators attribute the activity to Armory Castle, a suspected China-nexus espionage actor also tracked as UNC5221 and Warp Panda.