CyberWire Daily
CyberWire Daily
N2K Networks
Sunny-side spyware. [Research Saturday]
24 minutes Posted Sep 27, 2025 at 7:00 am.
0:00
24:00
Download MP3
Show notes

This week, we are joined by Martin Zugec, Technical Solutions Director from Bitdefender, sharing their work and findings on "EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company. A newly identified Chinese APT group has been observed deploying a sophisticated, fileless malware framework called EggStreme against a Philippine military company.

The multi-stage toolkit uses DLL sideloading and in-memory execution to evade detection, with its core backdoor, EggStremeAgent, enabling reconnaissance, lateral movement, keylogging, and data theft. Researchers note the campaign’s persistence and stealth highlight professional, geopolitically motivated espionage activity linked to Chinese national interests.

The research can be found here:

Learn more about your ad choices. Visit megaphone.fm/adchoices