Chinese cyber espionage group UNC5221 has been targeting US companies in legal, SaaS, BPO, and technology sectors using the sophisticated BRICKSTORM backdoor for over a year. The Go-based malware exploits vulnerabilities in network appliances like Ivanti Connect Secure devices, operates in...
Chinese state-sponsored hackers from the TA415 group conducted a sophisticated spear-phishing campaign targeting US government officials, think tanks, and academic institutions during July-August 2025. The attackers impersonated US-China trade committee representatives and business council...
Chinese state-sponsored hackers APT41 have been caught exploiting Google Calendar in a sophisticated cyber espionage campaign. The attack uses a three-stage malware called TOUGHPROGRESS that creates calendar events to transmit commands and exfiltrate stolen data. Victims are initially comp...
The Czech Republic has officially accused China of a cyber attack against its Foreign Ministry, attributing the breach to APT31, a state-sponsored threat actor linked to China's Ministry of State Security. The attack, which began in 2022, targeted an unclassified network designated as crit...
Earth Ammit, a Chinese-linked cyber espionage group, has targeted critical sectors in Taiwan and South Korea through two campaigns: VENOM and TIDRONE. Operating between 2023-2024, they strategically compromised drone supply chains and ERP software to infiltrate military, satellite, technol...
