UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. Mandiant researchers discovered the supply chain attack against a CCTV vendor. The crooks compromised the website and implanted malicious code in a Windows application, a custom version of the Dahua SmartPSS Windows app, that the company provides to its customers to control their security feeds. The tainted app was used by attackers to deliver a version of SMOKEDHAM backdoor, which supports keylogging, taking screenshots, and executing arbitrary commands.”]
Source: https://securityaffairs.co/wordpress/119051/cyber-crime/unc2465-supply-chain-attack.html