UNC5221

Google Threat Intelligence Group and Mandiant have disclosed evidence linking exploitation of a BeyondTrust Remote Support vulnerability to a suspected China-nexus espionage group. BeyondTrust has released security patches and identified two affected customer environments, but investigators warn that vulnerable remote-access systems could face further targeting after public disclosure.