Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
ESET reported that a campaign targeting Tibetans used two distinct routes: attackers compromised a website associated with the Kagyu Monlam Festival, and they placed trojanized Windows and macOS installers for Tibetan-language translation software on its developer’s website. ESET said the activity dated back to at least September 2023, was discovered in January 2024, and was attributable with high confidence to the group it calls Evasive Panda.
How did the watering-hole attack target Tibetans?
A watering-hole attack compromises a website likely to be visited by a particular community, then uses that site to target some of its visitors. In this case, ESET said attackers altered the website of Kagyu International Monlam Trust, an India-based organization that promotes Tibetan Buddhism internationally. ESET reported that added code targeted visitors connecting from specified networks; the reporting does not establish that every visitor, or every Tibetan visitor, was affected.
ESET said the timing may have been intended to exploit interest in the annual Kagyu Monlam Festival in Bodhgaya, India. A 2024 report by the Tibet Action Institute describes the lure as a fake error page that prompted visitors to install a supposed certificate as a “fix.” That is a description of the watering-hole route, not the translation-software installers.
What was the translation-software supply-chain attack?
The second route involved a software developer based in India that produced Tibetan-language translation software. ESET reported that trojanized installers were made available through the developer’s website for both Windows and macOS. Rather than being merely a compromised page that targeted site visitors, this route abused the software distribution channel: people seeking the translation program could download an installer carrying a malicious downloader.
#1 Best Overall
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
ESET named MgBot and Nightdoor among the campaign’s malware. It described Nightdoor as a previously undocumented Windows backdoor at the time it discovered the operation. The report’s mention of a macOS installer does not mean Nightdoor ran on macOS; ESET identified Nightdoor as Windows malware.
What did ESET establish about the operator?
ESET attributed the campaign to Evasive Panda with high confidence, citing links involving MgBot and Nightdoor. ESET also identifies the group by the names BRONZE HIGHLAND and Daggerfly and says it has been active since at least 2012. This is ESET’s analytical assessment, not a government finding or a judicial determination.
Rank #2
- Filter Dimensions: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- Two Attachment Options - Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- Superior Privacy and Anti Glare - Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- Perfect for Travel and Open Workspaces - Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- Package Contents - Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Where did the targeting reach?
ESET listed targeted network ranges in India, Taiwan, Hong Kong, Australia, and the United States, including a Georgia Tech network range. These are network-level targeting details, not a verified count of victims. They do not show that everyone in those places—or everyone using the named institution’s network—was infected. The reporting provides no verified campaign-wide victim total.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How does this campaign differ from other reported attacks?
In November 2024, the Associated Press reported Recorded Future findings about separate compromises of Tibet Post and Gyudmed Tantric University. In that activity, visitors were prompted to download an executable disguised as a security certificate; opening it loaded Cobalt Strike Beacon. Recorded Future labeled the activity TAG-112 and discussed a reported relationship to TAG-102. Those labels and findings should not be treated as a continuation of ESET’s account of the Monlam website and translation-software campaign.
Rank #3
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 13.56" (344.5 mm), Height: 8.49" (215.6 mm), Diagonal: 16" (406 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Recorded Future also reported RedAlpha campaigns targeting Tibetans in 2017 and 2018, assessing Chinese APT attribution with medium confidence based on targeting, infrastructure, and malware links. That historical assessment is separate from ESET’s high-confidence attribution of the 2023–2024 campaign. Differences in attribution confidence and technical details do not, by themselves, establish that the campaigns shared an operator or objective.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What can users and organizations take from the reporting?
The incidents illustrate two different trust relationships that can be abused: a community may trust a familiar organization’s website, while software users may trust an installer obtained from a developer’s distribution site. The cited reporting does not test consumer security products or show that any single product would have prevented these attacks.
Quick Recap
Best Value
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 12 3/16" (310 mm), Height: 6 7/8" (175 mm), Diagonal: 14" (355.6 mm) - There are two different 14 inch screen sizes, please select the correct one. SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Rank #4
- 【Filter Dimensions】: Width: 13 9/16" (345 mm), Height: 7 5/8" (194 mm), Diagonal: 15.6" (396.24 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Two Attachment Options】- Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- 【Superior Privacy and Reduce Glare】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- 【Package Contents】- Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
- Be cautious when a website unexpectedly instructs you to download or install a certificate to resolve an error. Verify the request through a separate, trusted channel before proceeding.
- For software downloads, confirm that the program and download source are expected, and follow the developer’s current security guidance if an installer is in question.
- If an organization suspects a compromised site or installer, it should investigate the relevant systems and distribution channel rather than assuming that changing a visitor’s password alone addresses the incident.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches
