Summary
Threat hunters have identified a China-aligned hacking group known as UnsolicitedBooker, which targeted an unnamed international organization in Saudi Arabia using a new backdoor called MarsSnake. ESET first detected these intrusions in March 2023 and observed renewed activity a year later, with the attackers employing spear-phishing emails as their primary method of infiltration. This highlights the ongoing cyber threats posed by state-aligned actors in the region.
