Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e)
Demodex is a rootkit observed during attacks linked to the GhostEmperor (AKA FamousSparrow and Salt Typhoon) China-backed cyberespionage group.[Kaspersky September 30 2021]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e) | Tidal Software | Salt Typhoon (753c7cd1-ca9f-4632-bbd2-fd55b9e70b10) | Tidal Groups | 1 |