Integration of Untrusted Software

The ANSSI advisory describes instances where mandatory Chinese business software (Golden Tax derivatives and Beijing One Pass) included hidden backdoor-like components (GoldenSpy, GoldenHelper) that exhibit persistence, privilege escalation, remote command execution and C2 communication; Trustwave and Recorded Future analyses and IoCs are cited. The report warns of supply-chain risk, notes no confirmed wide exploitation published to date, and gives concrete recommendations to isolate such software, restrict network flows, enforce least privilege, maintain secure updates and centralised logging to detect compromises.