{
 "Event": {
  "uuid": "56f903a0-faf9-553d-8ee8-6b13b9ced2d6",
  "info": "Targeting the moment of receiving configuration files... China-linked hackers manipulate DNS of Chinese input method 'Sogou' to install backdoor",
  "date": "2026-11-10",
  "threat_level_id": "2",
  "analysis": "0",
  "distribution": "3",
  "published": false,
  "Orgc": {
   "name": "SecurityStudies.info"
  },
  "Tag": [
   {
    "name": "tlp:clear"
   },
   {
    "name": "securitystudies:status=\"detected-unreviewed\""
   },
   {
    "name": "securitystudies:type=\"espionage\""
   },
   {
    "name": "misp-galaxy:threat-actor=\"UNC3569\""
   }
  ],
  "Attribute": [
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://securitystudies.info/cyber/incidents/targeting-the-moment-of-receiving-configuration-files-china-linked-hac-20261110/",
    "comment": "SecurityStudies.info entry",
    "to_ids": false
   },
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://www.boannews.com/news/articleView.html?idxno=147016",
    "comment": "Boannews (Korean)",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2026-120422",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2026-51990",
    "to_ids": false
   },
   {
    "type": "text",
    "category": "Other",
    "value": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: espionage campaign. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
    "comment": "summary",
    "to_ids": false
   }
  ]
 }
}