🕵️ Antino

The items that name it 2

• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  writeup2026-09-30

  Rust-compiled Windows backdoor (32-bit and 64-bit builds), named after AntinoApp manifest string and antino directory names in PDB/source paths; supports host reconnaissance, shell/PowerShell execution, file transfer, in-memory shellcode loading, and persistence; uses Microsoft Graph (Outlook and On

• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  article

  Previously undocumented Rust-compiled Windows backdoor deployed by UAT-11587. Supports host reconnaissance, shell and PowerShell execution, file transfer, in-memory shellcode loading, and persistence. Uses Microsoft Graph to communicate exclusively via Outlook and OneDrive as C2 dead drops instead o