Red Ladon Poisons Australian News Sites with ScanBox Keyloggers
Click that 'Sick Leave' email from Australian Morning News. Boom—your keystrokes are ScanBox's. China's Red Ladon just dusted off a 10-year-old trick for fresh espionage.
⚡ Key Takeaways
- Red Ladon uses ScanBox in watering holes mimicking Aussie news to keylog without disk malware.
- WebRTC/STUN enables NAT traversal, turning browsers into stealth C2 channels.
- Ties to China's MSS signal South China Sea cyber-escalation; expect broader use.
🧠 What's your take on this?
Cast your vote and see what Threat Digest readers think
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by Threatpost
Related Stories
Ransomware & Malware
0ktapus Phishing Snags 10,000 Credentials Across 130 Companies—Your MFA Is the Weak Link
Ransomware & Malware
Claude Code's 50-Command Cap: The Bypass That Unlocks Your Dev Machine
Ransomware & Malware
REF1695's ISO Trick: $9K Crypto Haul from Fake Installers and RATs
Ransomware & Malware