.jpg)
In the current cybersecurity landscape, Advanced Persistent Threat (APT) groups have refined their tactics to compromise critical infrastructures. A recent case illustrating this evolution is the activity of the Chinese actor identified as UAT-7810, which has developed a new malware called LONGLEASH with the aim of expanding its Operational Relay Network (ORB). This network, known as LapDogs, allows attackers to maintain covert communications and pivot within corporate networks, using public access network devices such as routers and switches as entry points. The strategy not only seeks to infect individual devices but to build a persistent communications infrastructure that hinders its detection and mitigation.
What is relevant about this incident is not only the malware itself, but how it demonstrates the growing sophistication of attacks targeting perimeter infrastructures. Companies that rely exclusively on traditional security solutions—such as basic firewalls or antimalware—are exposed to risks that evolve at the same pace as defenses. Faced with this, adopting a proactive approach that combines advanced cybersecurity with threat intelligence becomes indispensable. At Q2BSTUDIO, we understand that protection does not end with software installation; it requires continuous analysis, simulation of real attacks through pentesting, and the implementation of secure cloud architectures.
Internet-exposed network infrastructure, especially in environments migrating to cloud services aws and azure, represents a preferred attack vector for actors like UAT-7810. The ability of an APT to deploy persistent agents on edge devices requires organizations to review their hardening and segmentation policies. This is where artificial intelligence applied to anomaly detection—such as what we offer through AI for businesses and AI agents—can make a difference, identifying unusual communication patterns before the ORB network consolidates.
Beyond reactive response, prevention involves integrating security from the design of custom software that companies develop for their operations. When creating custom applications that manage sensitive data or interact with network devices, it is essential to incorporate security controls at every layer. At Q2BSTUDIO, we accompany our clients throughout this cycle: from designing secure architectures to implementing business intelligence services such as Power BI, which allow visualizing security metrics in real time and making informed decisions about the defensive posture.
The evolution of LONGLEASH and ORB networks like LapDogs reminds us that cybersecurity is not a destination, but a continuous process of adaptation. Companies that invest in trained personnel, advanced monitoring solutions, and collaboration with secure software development specialists will be better prepared to face these threats. At Q2BSTUDIO, we combine our experience in custom applications and cloud with a security-by-design approach, helping organizations build robust defenses that evolve at the pace of attackers.
