Security researchers at Intezer have recently discovered malware that has been continuously targeting Linux endpoints and servers. RedXOR is being managed by a group of threat actors that are directly appended to the Chinese government. Researchers have already found two samples of the malware on VirusTotal, that were uploaded from Taiwan and Indonesia, and consider the campaign is still running. There are some key similarities with former malware and botnets that were used by Winnti Group, a threat group that is directly linked with the Chinese intelligence services.”]
Source: https://gbhackers.com/redxor-malware-chinese-linked/