UAT-7810

UAT-7810 is a China-linked advanced persistent threat (APT) actor tracked by Cisco Talos. The group is actively refining the Longleash malware to compromise internet-facing networking devices and expand the LapDogs Operational Relay Box (ORB) proxying infrastructure.

Activities

• Develops and refines Longleash malware targeting networking devices
• Builds and maintains the LapDogs ORB — a network of compromised devices used as relay points
• The ORB infrastructure is then leveraged by UAT-5918, another China-nexus actor, for attacks on critical infrastructure in Taiwan

Infrastructure

• LapDogs ORB (Operational Relay Box): A proxy/relay network constructed from compromised internet-facing networking devices
• Acts as an operational relay for downstream attacks by other threat actors

Related Pages

• Longleash — The malware tool used by this group
• Silver Fox — Another China-linked group
• Netnut Takedown — Comparison: residential proxy abuse vs. compromised device relay networks