Security News > 2020 > June > 'GoldenSpy' Malware Hidden In Chinese Tax Software
A newly identified piece of malware is being distributed embedded in tax payment software that some businesses operating in China are required to install.
One of the compromised organizations, a global technology vendor that conducts government business in the US, Australia and UK, and which recently opened offices in China, became infected after installing "Intelligent Tax," a piece of software from the Golden Tax Department of Aisino Corporation, which a local bank required for paying local taxes.
The malware was found to be digitally signed by a company called Chenkuo Network Technology, and to operate completely independent of the tax software.
Thus, even if the Intelligent Tax software is uninstalled, GoldenSpy remains active on the system.
On the compromised machines, GoldenSpy is downloaded and executed two hours after the tax software has been installed.