PipeMagic in 2025: How the backdoor operators’ tactics have changed

PipeMagic is a backdoor first detected in December 2022 while researchers were investigating a malicious campaign involving RansomExx. The victims were industrial companies in Southeast Asia.