China-linked APT expands arsenal with new 'Leash' backdoors

The China-linked APT group expands its arsenal with three new Leash backdoors targeting SOHO routers. Discover the details of the LapDogs campaign.

jueves, 9 de julio de 2026 • 2 min read • Q2BSTUDIO Team

New Leash backdoors in LapDogs campaign

In the current cybersecurity landscape, state-sponsored actors continue to refine their offensive capabilities, and the recent expansion of a China-linked group's arsenal with new backdoors —known as LongLeash, DogLeash, and JarLeash— serves as a stark reminder of the constant evolution of threats. These types of tools, designed to compromise small office/home office (SOHO) routers, underscore the importance of understanding that no connected device is too small to be a target. The LapDogs campaign had already demonstrated considerable sophistication, but the addition of these backdoors indicates a strategy of persistence and adaptation that seeks to exploit vulnerabilities in environments with limited security resources.

Faced with this growing sophistication, companies must adopt a proactive approach that combines advanced technologies with specialized services. At Q2BSTUDIO, as a software and technology development company, we address this challenge from multiple fronts. On one hand, we offer cybersecurity and pentesting services that allow organizations to evaluate and strengthen their defensive posture, identifying attack vectors similar to those used by these APT groups. But security cannot be viewed in isolation; that's why we also integrate custom applications and custom software that adapt to each client's specific needs, incorporating security controls from the design stage.

Furthermore, artificial intelligence is becoming a key ally for early anomaly detection. Our AI agents and artificial intelligence solutions for businesses enable real-time traffic pattern analysis, identifying suspicious behaviors such as those generated by these backdoors. Likewise, proper infrastructure management is crucial, and our AWS and Azure cloud services ensure scalable and secure environments, while business intelligence services, including Power BI, help visualize and correlate security data to make informed decisions. The combination of all these capabilities —from robust software development to the implementation of AI for businesses— is part of a comprehensive strategy that mitigates the risks associated with advanced persistent threats like those we are seeing.

The lesson from this new wave of 'Leash' backdoors is clear: cybersecurity is no longer an isolated department, but a continuous process that must permeate all layers of the organization. From regularly updating router firmware to adopting Zero Trust architectures, every step counts. In an environment where attackers never rest, having technological partners that offer customized, robust, and innovation-based solutions —like those we develop at Q2BSTUDIO— becomes a competitive advantage and the best defense against constantly evolving threats.

A BREAK?

Play for a moment before you go

OUR SERVICES

How we can help you

Do you have a project in mind?

Tell us your vision and we'll turn it into a software solution. Whatever the scope, we make your idea real.