Threat investigators have provided additional insights into a previously revealed malware operation conducted by the China-affiliated MirrorFace threat group that aimed at a diplomatic entity within the European Union using a backdoor referred to as ANEL. The incursion, identified by ESET in late August 2024, specifically targeted a Central European diplomatic institution, employing bait associated with Word Expo, which is set to commence in
