Cisco Talos uncovered a China-nexus espionage campaign with the Antino backdoor — 03.10.2026

Cisco Talos identified an activity cluster tracked as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia. The campaign delivered a previously undocumented Rust-compiled Windows backdoor called Antino. By July 2026, Talos had identified at least 16 affected or targeted institutional environments across eight Asian countries and approximately 350 compromised endpoints.