Aside from leveraging spear-phishing emails, Earth Baxia also exploited the recently addressed critical GeoServer GeoTools flaw, tracked as CVE-2024-36401.
Article Link: New EAGLEDOOR backdoor spread in suspected Chinese APT attacks against Asia-Pacific | SC Media