Cybersecuritynews iconCybersecuritynewsOct 21, 2026

China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials

China-linked hackers are using trusted Windows applications to load hidden backdoors, collect system details, and steal Active Directory credential data. The group, tracked as BRONZE SANDCASTLE, places malicious files beside legitimate software, allowing familiar programs to run attacker-controlled code without changin

China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials

Share this story

Send the public story page.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app