BLACKWOOD HACKERS HIJACK WPS OFFICE UPDATE TO INSTALL MALWARE

Summary from the TLDR InfoSec newsletter

The Blackwood hacking group has been using advanced malware called NSPX30 to conduct cyberespionage attacks against companies and individuals since at least 2018. The group's activities align with Chinese state interests. Its targets are located in China, Japan, and the United Kingdom. Blackwood has been delivering the malware through the update mechanisms of legitimate software, including WPS Office, Tencent QQ, and Sogou Pinyin.