H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Chinoxy](https://attack.mitre.org/software/S1041) is a backdoor that has been used since at least November 2018, during the [FunnyDream](https://attack.mitre.org/campaigns/C0007) campaign, to gain persistence and drop additional payloads. According to security researchers, [Chinoxy](https://attack.mitre.org/software/S1041) has been used by Chinese-speaking threat actors.(Citation: Bitdefender FunnyDream Campaign November 2020)

Labels

malware
6 recorded

Relationships

2 external

References

mitre-attack
S1041
open
Bitdefender FunnyDream Campaign November 2020
https://www.bitdefender.com/files/News/CaseStudies/study/379/Bitdefender-Whitepaper-Chinese-APT.pdf
open