Chinese threat actor Muddling Meerkat, linked to the government, has been manipulating the Great Firewall to scan DNS networks globally since October 2019.

Muddling Meerkat controls the Great Firewall and has altered DNS mail server records with fake responses.

The actor's advanced knowledge of DNS and stealth tactics suggest a potential for future disruptive cyberattacks.

Connections have been made between Muddling Meerkat's activities and Great Firewall operators.

The discovery underscores the need for robust DNS detection and response strategies to safeguard against complex threats.