Tracking the Progression of Earth Hundun’s Cyberespionage Campaign in 2024

Deuterbear, while similar to Waterbear in many ways, shows advancements in capabilities such as including support for shellcode plugins, avoiding handshakes for RAT operation, and using HTTPS for C&C communication.