China

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware 2025-10-01 at 16:33 By Ionut Arghire Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks. The post Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware Read More »

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks 2025-09-26 at 10:20 By Ionut Arghire Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot. The post Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks appeared first on SecurityWeek. This article is an excerpt […]

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks Read More »

Chinese Cyberspies Hacked US Defense Contractors

Chinese Cyberspies Hacked US Defense Contractors 2025-09-25 at 16:11 By Ionut Arghire RedNovember has been targeting government, defense and aerospace, and legal services organizations worldwide. The post Chinese Cyberspies Hacked US Defense Contractors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese Cyberspies Hacked US Defense Contractors Read More »

Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel

Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel 2025-09-25 at 15:33 By Eduard Kovacs Google’s Threat Intelligence Group and Mandiant have shared findings on a recent BrickStorm campaign linked to UNC5221. The post Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel appeared first on SecurityWeek. This article […]

Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel Read More »

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker 2025-09-17 at 15:59 By Ionut Arghire The campaign targeted US government, think tank, and academic entities involved in US-China relations, international trade, and economic policy. The post Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker appeared first on SecurityWeek. This article is an excerpt from […]

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker Read More »

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report 

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report  2025-09-08 at 18:35 By Eduard Kovacs China’s APT41 sent out malicious emails on behalf of Rep. John Moolenaar to collect information ahead of US-China trade talks. The post Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report  appeared first on […]

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report  Read More »

New threat group uses custom tools to hijack search results

New threat group uses custom tools to hijack search results 2025-09-04 at 12:02 By Anamarija Pogorelec ESET Research has identified a new threat group called GhostRedirector. In June 2025, this group broke into at least 65 Windows servers, mostly in Brazil, Thailand, Vietnam, and the United States. Countries where GhostRedirector victims were detected (Source: ESET) […]

New threat group uses custom tools to hijack search results Read More »

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years 2025-08-28 at 17:21 By Ionut Arghire China-linked APT ‘Salt Typhoon’ exploited known router flaws to maintain persistent access across telecom, government, and military networks, giving Beijing’s intelligence services global surveillance reach. The post China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years appeared first on SecurityWeek. […]

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years Read More »

China-Linked Hackers Hijack Web Traffic to Deliver Backdoor

China-Linked Hackers Hijack Web Traffic to Deliver Backdoor 2025-08-27 at 19:24 By Ionut Arghire Google researchers say China-linked UNC6384 combined social engineering, signed malware, and adversary-in-the-middle attacks to evade detection. The post China-Linked Hackers Hijack Web Traffic to Deliver Backdoor appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked Hackers Hijack Web Traffic to Deliver Backdoor Read More »

China-linked Murky Panda targets and moves laterally through cloud services

China-linked Murky Panda targets and moves laterally through cloud services 2025-08-22 at 17:33 By Zeljka Zorz In its recently released 2025 Threat Hunting Report, Crowdstrike pointed out an interesting trend: a 136% surge in cloud intrusions. A good chunk of this surge is due to “China-nexus adversaries”, Murky Panda (aka Silk Typhoon) among them. Murky […]

China-linked Murky Panda targets and moves laterally through cloud services Read More »

Chinese Researchers Suggest Lasers and Sabotage to Counter Musk’s Starlink Satellites

Chinese Researchers Suggest Lasers and Sabotage to Counter Musk’s Starlink Satellites 2025-07-31 at 17:41 By Associated Press Chinese military and cyber researchers are intensifying efforts to counter Elon Musk’s Starlink satellite network, viewing it as a potential tool for U.S. military power across nuclear, space, and cyber domains. The post Chinese Researchers Suggest Lasers and […]

Chinese Researchers Suggest Lasers and Sabotage to Counter Musk’s Starlink Satellites Read More »

Report Links Chinese Companies to Tools Used by State-Sponsored Hackers

Report Links Chinese Companies to Tools Used by State-Sponsored Hackers 2025-07-31 at 14:59 By Ionut Arghire SentinelLabs connects the dots between prolific Chinese state-sponsored hackers and companies developing intrusion tools. The post Report Links Chinese Companies to Tools Used by State-Sponsored Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Report Links Chinese Companies to Tools Used by State-Sponsored Hackers Read More »

Ports are getting smarter and more hackable

Ports are getting smarter and more hackable 2025-07-23 at 08:31 By Sinisa Markovic A new policy brief from NATO’s Cooperative Cyber Defence Centre of Excellence (CCDCOE) warns that critical port infrastructure, responsible for 80 percent of global trade, is increasingly under attack by threat actors tied to Russia, Iran, and China. These ports are essential […]

Ports are getting smarter and more hackable Read More »

Microsoft pins on-prem SharePoint attacks on Chinese threat actors

Microsoft pins on-prem SharePoint attacks on Chinese threat actors 2025-07-22 at 18:54 By Zeljka Zorz As Microsoft continues to update its customer guidance for protecting on-prem SharePoint servers against the latest in-the-wild attacks, more security firms have begun sharing details about the ones they have detected. Most intriguingly, Check Point Research says that they observed […]

Microsoft pins on-prem SharePoint attacks on Chinese threat actors Read More »

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets 2025-07-22 at 11:44 By Eduard Kovacs More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities. The post ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets appeared first on SecurityWeek. […]

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets Read More »

Mobile Forensics Tool Used by Chinese Law Enforcement Dissected

Mobile Forensics Tool Used by Chinese Law Enforcement Dissected 2025-07-17 at 14:46 By Ionut Arghire Deployed on mobile devices confiscated by Chinese law enforcement, Massistant can collect user information, files, and location. The post Mobile Forensics Tool Used by Chinese Law Enforcement Dissected appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Mobile Forensics Tool Used by Chinese Law Enforcement Dissected Read More »

China’s Salt Typhoon Hacked US National Guard

China’s Salt Typhoon Hacked US National Guard 2025-07-16 at 12:25 By Ionut Arghire Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units. The post China’s Salt Typhoon Hacked US National Guard appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China’s Salt Typhoon Hacked US National Guard Read More »

TikTok Faces Fresh European Privacy Investigation Over China Data Transfers

TikTok Faces Fresh European Privacy Investigation Over China Data Transfers 2025-07-11 at 12:04 By Associated Press The Irish Data Privacy Commission announced that TikTok is facing a new European Union privacy investigation into user data sent to China. The post TikTok Faces Fresh European Privacy Investigation Over China Data Transfers appeared first on SecurityWeek. This […]

TikTok Faces Fresh European Privacy Investigation Over China Data Transfers Read More »

Alleged Chinese State Hacker Wanted by US Arrested in Italy

Alleged Chinese State Hacker Wanted by US Arrested in Italy 2025-07-09 at 09:46 By Eduard Kovacs Xu Zewei has been arrested on charges that he is a member of the Chinese state-sponsored hacking group Hafnium (Silk Typhoon). The post Alleged Chinese State Hacker Wanted by US Arrested in Italy appeared first on SecurityWeek. This article […]

Alleged Chinese State Hacker Wanted by US Arrested in Italy Read More »

Canada Gives Hikvision the Boot on National Security Grounds

Canada Gives Hikvision the Boot on National Security Grounds 2025-06-30 at 13:18 By Ionut Arghire Canada has ordered Hikvision to cease all operations in the country and prohibited the purchase and use of Hikvision products within government entities. The post Canada Gives Hikvision the Boot on National Security Grounds appeared first on SecurityWeek. This article […]

Canada Gives Hikvision the Boot on National Security Grounds Read More »

Scroll to Top