Chinese threat actor Red Menshen used a custom backdoor dubbed BPFDoor to target telecommunications providers, government systems, postal and logistic systems, and others in the United States, Hong Kong, India, Myanmar, South Korea, Turkey, and Vietnam. Red Menshen moved laterally across Windows systems, sending commands via a virtual private server that were administered by compromised Taiwanese routers.