China Chopper still active 9 years later
released on 2019-08-27 @ 04:47:56 PM
China Chopper is a tool that allows attackers to remotely control the target system that needs to be running a web server application before it can be targeted by the tool. The web shell works on different platforms, but in this case, Talos focused only on compromised Windows hosts. China Chopper is a tool that has been used by some state-sponsored actors such as Leviathan and Threat Group-3390, but during their investigation they've seen actors with varying skill levels.