China-Linked MirrorFace Group Deploys ANEL Malware Against EU Diplomatic Organization

In August 2024, cybersecurity researchers discovered a malware campaign conducted by the China-linked group MirrorFace, targeting a diplomatic organization of the European Union. The attack used a lure related to the World Expo of Words to deploy a backdoor known as ANEL. This operation was detected by ESET and targeted a diplomatic institute in Central Europe. Technical details include the use of ANEL and AsyncRAT in this new cyberespionage operation.