Winnti Group hackers have updated their arsenal with a new modular Windows backdoor. The new malware is called PortReuse and uses a network implant that waits for a magic packet to activate it. The malware is being used to infect servers of a high-profile mobile hardware and software manufacturer in Asia. ESET was able to detect one company whose servers were infected with a variant of the malware. It is possible that the group is planning a devastating supply chain attack by compromising the company’s servers.
Source: https://www.bleepingcomputer.com/news/security/winnti-group-uses-new-portreuse-malware-against-asian-manufacturer/