China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions

VARGEIT offers the ability to load tools directly from its command-and-control (C&C) server to a newly spawned process of Microsoft Paint ("mspaint.exe") to facilitate reconnaissance, collection, and exfiltration.