AccountSubscribe

SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

ESET WeLiveSecurityNovember 4, 2026Endpoint Threat Intel

MentionsESET Microsoft Microsoft Windows

ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method

Summary from ESET WeLiveSecurity.

Read the full article at ESET WeLiveSecurity

Full story3 outlets are covering this story. Read the summary and every outlet's coverage

Explained

The technology and terms in this story. Learn more

ProtocolDNS · Domain Name SystemThe internet's phone book: it turns names like example.com into the addresses computers connect to.

Other sources covering the same vulnerabilities or event.

China-Aligned Group Abuses Sogou Input Method to Deliver Malware

Infosecurity Magazine15h agoThreat Intel

China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

The Hacker News19h agoEndpointThreat IntelNetwork

More in Endpoint

OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

The Hacker News2h agoVulnerabilitiesAIEndpoint

Hackers exploited iOS and Android flaws to infect phones

Ars Technica Security8h agoVulnerabilitiesEndpointThreat Intel

Apple turns iCloud into spy cloud, will start looking at public share links

The Register Security8h agoEndpointCloud

Android security advisory – November 2026 monthly rollup (AV26-1128)

Canadian Centre for Cyber Security10h agoVulnerabilitiesEndpoint

Falcon Intelligence Mobile: Adversary Insights and Agentic AI in Your Pocket

VideoCrowdStrike10h agoAIEndpoint