Chinese Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

A China-aligned threat actor is exploiting insecure HTTP communications within the Windows version of the Sogou Input Method to conduct DNS hijacking. This campaign leverages the technique to deploy the DarkVigil backdoor for targeted surveillance operations.