UAT-7810 expands ORB network: new LONGLEASH and router attacks

Colleagues, I’d like to highlight a cybersecurity update: the UAT-7810 group continues to expand its ORB network and is testing a new backdoor, LONGLEASH.

According to Cisco Talos, the attackers are exploiting vulnerable internet-facing devices, including Ruckus routers and ASUS AiCloud, to grow infrastructure for subsequent attacks.

In addition to LONGLEASH, researchers note DOGLEASH, LEASHTEST, and JARLEASH — a toolkit for remote access, proxying, and administration.

Why this matters: these chains show that ordinary network devices remain a convenient entry point for APT groups.

How do you secure edge devices in your environment?

#cybersecurity #APT #ThreatIntel #NetworkSecurity