Tag: Java SOE
-
China-Backed Flax Typhoon APT Maintained Year-Long Access by Turning ArcGIS SOE into Web Shell Backdoor
For more than a year, a Chinese hacking group had been covertly exploiting an ArcGIS server as a clandestine access channel, transforming it into a resilient point of persistence. The campaign, uncovered by ReliaQuest analysts, has been attributed to the threat group Flax Typhoon, also known as Ethereal Panda and RedJuliett. According to U.S. authorities,…