Cybersecurity researchers have detailed a new campaign dubbed OneClik that leverages Microsoft’s ClickOnce software deployment technology and bespoke Golang backdoors to compromise organizations within the energy, oil, and gas sectors.
« The campaign exhibits characteristics aligned with Chinese-affiliated threat actors, though attribution remains cautious, » Trellix researchers Nico Paulo