South American telecommunication providers targeted with three new malware implants

Reported 05 Mar 2026 by otx · Severity: high

UAT-9244, a China-nexus advanced persistent threat actor, has been targeting critical telecommunications infrastructure in South America since 2024. The group employs three new malware implants: TernDoor, a Windows-based backdoor variant of CrowDoor; PeerTime, an ELF-based backdo