China-Linked APT Group UAT-7810 Expands ORB Network Using NEW LONGLEASH Malware

China-linked APT group UAT-7810 is expanding its ORB network through custom malware like LONGLEASH, targeting internet-facing networking devices. The threat actor exploits vulnerabilities in routers and uses multiple backdoors to establish persistent access for malicious operations.

A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet-facing networking devices.

According to findings from Cisco Talos, UAT-7810 is an advanced persistent threat (APT) actor that's responsible for maintaining and proliferating LapDogs, an ORB network that first came to light in June 2025.

Read original article