← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia
WHITE SHADOW-EARTH-053 Tr1sa111 2026-05-05 Modified: 2026-05-30
96
IOCs
HIGH VOLUME
vshellproxylogon exploitationgodzillaexchange server compromiseringqgodzilla webshellshadowpadnoodlerat
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
GODZILLA ShadowPad - S0596 POISONPLUG.SHADOW NOODLERAT RingQ IOX VShell
Indicators of Compromise (5 / 96 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname CVE
TYPEINDICATORDESCRIPTIONCREATED
CVE CVE-2021-26855 — 2026-05-05
CVE CVE-2021-26857 — 2026-05-05
CVE CVE-2021-26858 — 2026-05-05
CVE CVE-2021-27065 — 2026-05-05
CVE CVE-2025-55182 — 2026-05-05
References (1)
↗ https://www.trendmicro.com/en_us/research/26/d/inside-shadow-earth-053.html