New Antino Backdoor Leverages Outlook and OneDrive for C2 in Asian Espionage Campaign

A China-nexus threat actor is targeting government organizations across Asia using a newly documented backdoor named Antino. The malware abuses legitimate cloud services, specifically Outlook and OneDrive, for command-and-control communications to evade detection. Network administrators in targeted regions should review indicators of compromise and monitor traffic to these cloud APIs for anomalous behavior.