A China-linked advanced persistent threat (APT) group has been attributed to a highly targeted cyber espionage campaign that used Domain Name System (DNS) poisoning to deliver an MgBot backdoor to selected victims, Kaspersky reported. The activity was observed between November 2022 and November 2024 and affected systems in Türkiye, China