China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware
Dec 18, 2025Ravie LakshmananMalware / Cloud Security A previously undocumented China-aligned threat cluster dubbed LongNosedGoblin has been attributed to a...
Chinaaligned
From HealthKick to GOVERSHELL: The Evolution of UTA0388’s Espionage Malware
Oct 09, 2025Ravie LakshmananCyber Espionage / Artificial Intelligence A China-aligned threat actor codenamed UTA0388 has been attributed to a series...
Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts
Sep 17, 2025Ravie LakshmananCyber Espionage / Malware A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns...
Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs
Sep 15, 2025Ravie LakshmananMalware / Network Security The China-aligned threat actor known as Mustang Panda has been observed using an...
Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool
A China-aligned advanced persistent threat (APT) group called TheWizards has been linked to a lateral movement tool called Spellbinder that...
South Korean VPN Provider Targeted by PlushDaemon APT in Cyberattack
ESET recently revealed that a newly identified APT group, PlushDaemon, with ties to China, carried out a supply chain attack...
Chinese Advanced Persistent Threat Gelsemium Focuses on Linux Systems Using Fresh WolfsBane Backdoor
An advanced persistent threat group linked to China, known as Gelsemium, has been detected employing a recently discovered Linux backdoor...
Hackers Aligned with China Target EU Diplomats Using World Expo 2025 Temptation
Nov 07, 2024Ravie LakshmananThreat Intelligence / Cyber Espionage A diplomatic institution in the European Union has come under attack from...
