daily cyber × ai intelligence

← threat actors

threat actor · CN

UAT-7810

2 stories · 2 in the wild · July 8, 2026 – July 9, 2026

evidence: 2 observed

how they got in

edge device 1 · Jul 8

sectors

critical infrastructure 1 · Jul 8
technology 1 · Jul 8
telecom 1 · Jul 8

geography

china 2 · Jul 9

malware and tools

longleash 2 · Jul 9
dogleash 1 · Jul 9
jarleash 1 · Jul 9
lapdog 1 · Jul 9

techniques

persistence 2 · Jul 9
command and control 1 · Jul 9

attack phases seen

Persistence 2 · Jul 9
Command and control 1 · Jul 9
Initial access 1 · Jul 8

what we reported, newest first, grouped by story

Jul 8 – July 9, 2026 · 2 reports

UAT-7810 (Cisco Talos), the actor behind the LapDogs ORB network, is expanding its SOHO-router relay infrastructure with new LONGLEASH, DogLeash, and JarLeash backdoors. The Hacker News, SecurityWeek · Jul 9 · observed · Threat Activity
Chinese actor UAT-7810 is deploying new "LONGLEASH" malware to grow an Operational Relay Box (ORB) network, primarily by compromising unpatched internet-facing Ruckus routers. BleepingComputer · Jul 8 · observed · via edge device · Threat Activity