china
-
Strategic Vulnerabilities: The Geopolitical Weaponization of Water and Wastewater Infrastructure
Modern water and wastewater utilities have transitioned into high-value strategic targets within the “gray-zone” of international conflict. Driven by decades…
Read More » -
In-Memory Evasion: Deconstructing the “Dropping Elephant” China-Themed Loader Chain
A sophisticated threat actor, tracked as “Dropping Elephant,” has deployed a highly evolved campaign characterized by the use of China-themed…
Read More » -
Analyzing the AryStinger Botnet: Exploitation of Legacy Edge Infrastructure
Security researchers have identified a sophisticated new botnet family, AryStinger, which specifically targets the “forgotten” layers of the network: aging…
Read More » -
Velvet Ant: Surgical Subversion of Critical Infrastructure Authentication Stacks (PAM and OpenSSH)
In a sophisticated display of cyber-persistence, the China-nexus threat actor known as Velvet Ant has been unmasked for executing a…
Read More » -
Advanced Espionage: Deconstructing OP-512’s Custom ASPX Web Shell Framework
A sophisticated China-linked threat actor, designated as OP-512, has been identified deploying a highly specialized web shell framework designed specifically…
Read More » -
DATA, DLLs, and PlugX: Deconstructing Mustang Panda’s Latest Move
Recent threat intelligence reveals a sophisticated campaign by Mustang Panda, a China-nexus APT group frequently linked to espionage against government…
Read More » -
The Rise of Underminr: Exploiting CDN Edge Infrastructure to Bypass DNS Security
New research from ADAMnetworks has unveiled a sophisticated evasion technique dubbed “Underminr.” This method allows threat actors to bypass traditional…
Read More » -
Infrastructure-Centric Espionage: China-Linked Actors Compromise Southeast Asian Edge Routers
A sophisticated espionage campaign, attributed to China-nexus threat actors, is currently targeting organizations across Southeast Asia. Unlike traditional attacks that…
Read More » -
Multiplatform Espionage: Deconstructing ScarCruft’s Sophisticated Supply-Chain Attack on Gaming Platforms
In a highly targeted display of cyber espionage, the North Korea-aligned APT group ScarCruft (also known as APT37 or Reaper)…
Read More » -
500,000 Britons’ Genetic Data Listed for Sale on Alibaba — And No One Noticed Until It Was Too Late
Sometime in mid-April 2026, a product appeared on Alibaba — China’s sprawling, Amazon-like e-commerce platform — that had no business…
Read More » -
NCSC-UK Warns of China-Linked Covert Networks Using Hijacked IoT Devices
The UK’s National Cyber Security Centre (NCSC), along with international partners, has issued a joint warning about a growing trend…
Read More » -
Inside the ProxySmart Ecosystem: How a Belarusian Platform is Powering a Global SIM Farm-as-a-Service Network
Infrastructure intelligence firm Infrawatch has recently uncovered a sprawling, globally distributed SIM Farm-as-a-Service ecosystem, all orchestrated through a single software…
Read More » -
Still Using FTP? 6 Million Exposed Servers Remain Security Risk
A recent security brief from internet intelligence firm Censys reveals that despite its 55-year history, the File Transfer Protocol (FTP)…
Read More » -
New PlugX USB Worm Variant Spreads Globally Using Stealthy DLL Sideloading Techniques
A new variant of the PlugX USB worm is causing renewed concern as it spreads across several continents, leveraging DLL…
Read More » -
China-Linked APT41 Deploys Stealthy Linux Backdoor with SMTP Command-Control
Security researchers have uncovered a previously undocumented Linux backdoor attributed to China-linked APT41 (Winnti) group, actively targeting cloud workloads across…
Read More »