Hide Navigation Hide TOC

Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e)

Demodex is a rootkit observed during attacks linked to the GhostEmperor (AKA FamousSparrow and Salt Typhoon) China-backed cyberespionage group.^{[Kaspersky September 30 2021]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Salt Typhoon (Deprecated) (753c7cd1-ca9f-4632-bbd2-fd55b9e70b10)	Tidal Groups	Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e)	Tidal Software	1
Demodex (f484fae4-53ca-456b-89f1-3a583beacb9e)	Tidal Software	Salt Typhoon (759dcc8f-01ae-503f-922f-b144cd54ea15)	Tidal Groups	1