# CrowdStrike reports USB backdoor campaign against executives in China

_Published Thursday, September 3, 2026 at 2:06 PM EDT · Security · Latest · Tier 2 — Notable_

![CrowdStrike reports USB backdoor campaign against executives in China — Primary](https://images.ctfassets.net/jdtwqhzvc2n1/78aJqjEWEfLPylQ5hFbxNx/5baad823bfb46a5978f6a7d34b75880b/Gemini_Generated_Image_12nm5b12nm5b12nm.jpeg?w=800&q=75)

CrowdStrike reported that a China-linked group it tracks as OVERCAST PANDA compromised executives' laptops at an agricultural conference on Hainan Island between March and May. The company said intruders entered hotel rooms, booted machines from USB media and wrote the FlowCloud backdoor to storage. CrowdStrike said its OverWatch team disrupted the activity, but endpoint detection began only after the compromised devices next booted. The company assessed the group would almost certainly continue.

## Sources

- [VentureBeat](https://venturebeat.com/security/china-linked-hackers-backdoored-executives-laptops-via-usb-exploiting-a-fix-companies-had-but-werent-using)

---
Canonical: https://techandbusiness.org/newswire/ZllBPm78uzg6w-0oup3uyJ
Published: 2026-09-03T18:06:56.183Z
Story chronology: 2026-09-03T17:33:09.000Z
Retrieved: 2026-10-19T06:55:58.382Z
Publisher: Tech & Business (techandbusiness.org)
