Cybersecurity News and Headlines

LongNosedGoblin Caught Snooping on Asian Governments

ESET has identified a new Chinese‑backed advanced persistent threat group, LongNosedGoblin, conducting cyber‑espionage against Japan and other Southeast Asian governments since 2023. The group leverages custom C#/.NET malware and uniquely abuses Windows Group Policy to drop payloads and move laterally across networks. Its toolkit includes NosyHistorian for browser‑history harvesting, NosyDoor backdoor that uses Microsoft OneDrive for command‑and‑control, and additional modules such as NosyDownloader and NosyStealer. Fewer than a dozen victims have been confirmed, indicating a moderate‑level, highly targeted operation.