Chinese cyber espionage group UNC5221 has been targeting US companies in legal, SaaS, BPO, and technology sectors using the sophisticated BRICKSTORM backdoor for over a year. The Go-based malware exploits vulnerabilities in network appliances like Ivanti Connect Secure devices, operates in...
Chinese hackers linked to UNC5221 have conducted a sophisticated year-long espionage campaign using Brickstorm malware to infiltrate U.S. technology and legal organizations. The Go-based backdoor remained undetected for an average of 393 days, targeting network appliances without EDR prote...
Chinese state-sponsored hackers from the TA415 group conducted a sophisticated spear-phishing campaign targeting US government officials, think tanks, and academic institutions during July-August 2025. The attackers impersonated US-China trade committee representatives and business council...
Chinese hacking group Silver Fox is targeting Chinese-speaking users through fake software distribution websites that mimic legitimate platforms for popular applications like WPS Office and Sogou. The sophisticated campaign uses malicious MSI installers to deploy Sainbox RAT (a Gh0st RAT v...
Chinese hackers have breached multiple US local government networks by exploiting a critical vulnerability (CVE-2025-0994) in Trimble Cityworks, a system widely used by municipalities and utilities. The threat group UAT-6382 began targeting these entities in January 2025, using sophisticat...
