Chinese state-sponsored hackers (UNC5221) are exploiting two critical Ivanti EPMM vulnerabilities (CVE-2025-4427, CVE-2025-4428) in a global cyber espionage campaign targeting healthcare, telecommunications, aviation, government, finance, and defense sectors across Europe, North America, a...
Chinese APT group Mustang Panda has deployed new attack techniques using legitimate Windows tools, including Microsoft's MAVInject.exe, to evade security measures. The group targets Thailand users through a sophisticated chain involving legitimate Electronic Arts applications, modified TON...
Chinese APT group Winnti conducts RevivalStone cyber espionage campaign targeting Japanese manufacturing, materials, and energy sectors. The attack exploits SQL vulnerabilities and deploys various malware components including DEATHLOTUS, PRIVATELOG, and CUNNINGPIGEON. Using compromised MSP...
A Chinese cyber group traditionally known for espionage has expanded into ransomware operations, as revealed in a November 2024 attack using RA World ransomware. The group, linked to Mustang Panda, targeted multiple organizations throughout 2024-2025 using PlugX malware and DLL side-loadin...
Chinese APT group PlushDaemon discovered targeting South Korean VPN provider through supply chain attack, deploying sophisticated SlowStepper backdoor capable of extensive surveillance and data theft. Active since 2019, the group has targeted multiple countries, demonstrating advanced pers...
