Skip to content

Hide Navigation Hide TOC

Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e)

Demodex is a rootkit observed during attacks linked to the GhostEmperor (AKA FamousSparrow and Salt Typhoon) China-backed cyberespionage group.[Kaspersky September 30 2021]

Cluster A Galaxy A Cluster B Galaxy B Level
Salt Typhoon (Deprecated) (753c7cd1-ca9f-4632-bbd2-fd55b9e70b10) Tidal Groups Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e) Tidal Software 1
Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e) Tidal Software Salt Typhoon (759dcc8f-01ae-503f-922f-b144cd54ea15) Tidal Groups 1