Inside Red Lamassu’s JFMBackdoor

Red Lamassu, a China-based threat actor, is leveraging a sophisticated Windows backdoor dubbed JFMBackdoor—capable of remote access, file and network operations, and stealthy persistence—against telecommunications and government targets across Asia Pacific, using an interconnected infrastructure of bespoke malware and overlapping command-and-control domains.