CrowdStrike reports USB backdoor campaign against executives in China

CrowdStrike reported that a China-linked group it tracks as OVERCAST PANDA compromised executives' laptops at an agricultural conference on Hainan Island between March and May. The company said intruders entered hotel rooms, booted machines from USB media and wrote the FlowCloud backdoor to storage. CrowdStrike said its OverWatch team disrupted the activity, but endpoint detection began only after the compromised devices next booted. The company assessed the group would almost certainly continue.