China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

Cisco Talos has identified a China-nexus threat actor, UAT-11587, targeting government, military, and policy organizations across Asia, including Taiwan, India, and the Philippines. The campaign utilizes a sophisticated five-stage infection chain initiated via spear-phishing emails that mimic legitimate services like Gmail attachment previews and spoof trusted sender domains to bypass email security filters. The primary payload is Antino, a previously undocumented Rust-compiled backdoor capable