HackFraudChina-Aligned Hackers Use DNS Hijacking in Sogou Input Method to Deploy Backdoor
Published: 4 Nov 2026 · China
A China-aligned group called SlippyNunchucks hijacked DNS requests in Windows Sogou Input Method to deploy the DarkVigil backdoor. This surveillance campaign began July 2026 and targets organizations using this software.
Who is at risk
Organizations using Sogou Input Method on Windows
How to protect yourself
- Use secure DNS protocols like DNS over HTTPS or DNS over TLS
- Keep software updated to patch security vulnerabilities
- Monitor network traffic for unusual DNS requests or connections
Source: The Hacker News (thehackernews.com)
Language: English Ελληνικά Español Français Deutsch Italiano Português Nederlands Polski Türkçe Русский العربية हिन्दी 中文 日本語