[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV54_KujBoyH0Jlo8o9XdgGS-lB3Fb1mK_GSP0LtO0yM":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"Teleboyi","teleboyi",[],"Teleboyi is a threat actor reportedly based in China, associated with the PlugX RAT. TeamT5 identified a custom PlugX loader used by Teleboyi that employs a similar string decryption algorithm as seen in the McUtil.dll loader from Operation Harvest. While there are weak links to the dsqurey[.]com domain, the connection remains uncertain due to the domain's registration history.","CN",null,[],[],[],[16],"https:\u002F\u002Fwww.trendmicro.com\u002Fen_us\u002Fresearch\u002F25\u002Fb\u002Fupdated-shadowpad-malware-leads-to-ransomware-deployment.html",[],0,"2025-03-07T02:15:06.598596+00:00",{"title":21,"metaDescription":22,"keywords":23},"Teleboyi Threat Actor Profile | EdgeProtect","Teleboyi is a threat actor reportedly based in China, associated with the PlugX RAT. TeamT5 identified a custom PlugX loader used by Teleboyi that emp...","Teleboyi, threat actor, APT, cyber threat, threat intelligence, CN",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":9,"url":28,"mainEntityOfPage":29,"location":31},"https:\u002F\u002Fschema.org","Organization",[],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fteleboyi",{"@type":30,"@id":28},"WebPage",{"@type":32,"name":10},"Country"]