#China
55 stories taggedChina.

Ten governments name a Shanghai contractor as the engine behind China's data-theft campaigns
A joint advisory led by CISA and the FBI pins years of intrusions on Integrity Technology Group and lists eight old, unpatched flaws the operators keep riding into critical infrastructure.

China-linked hackers posed as Anthropic staff to phish U.S. AI policy experts
A group tracked as TA419 ran fake-login pages that could capture passwords and the one-time codes meant to stop them.

Warlock keeps hitting SharePoint servers across Latin America and Iberia, Symantec says
The ransomware group is still breaking into Microsoft SharePoint servers in Portuguese and Spanish-speaking countries, hitting hospitals, government offices and schools.

China-Linked Spies Hide Inside Outlook and OneDrive to Steal Asian Government Secrets
A newly documented backdoor called Antino is sitting on at least 16 government networks across eight Asian countries, and it talks to its handlers through legitimate Microsoft 365 traffic.

NeedyMantis: The Hidden Malware That Moves In After the Break-In
Microsoft has named a previously unknown malware family being used against telecoms, universities, and government contractors. The group behind it is linked to China. And once it's inside a network, it's built to stay quiet.

US Agencies Say Chinese AI Firms Are Stealing From American Models at Industrial Scale
A joint NSA, CISA and FBI advisory names DeepSeek, Alibaba, Moonshot AI, MiniMax, StepFun and Z.AI as running organised campaigns to copy the inner workings of Claude, GPT, Gemini and Grok.

Four Spy Crews Fired the Same Chrome and Windows Exploit Kit in One Week
Researchers say a previously unseen toolkit called BlueMoon, first used by China-linked APT31, was shared across multiple espionage groups to break into browsers and take over Windows machines.

China-linked hackers slipped a backdoor onto PCs through Sogou, a popular Chinese typing tool
Researchers tracking the cluster as UNC3569 say a single crafted link was enough to hand attackers full control of a victim's Windows machine.

Invisible Characters, SIM Swap Jail Time, and a $10 Million Bounty: This Week's Security Briefing
A trick that hides malicious text from spam filters, a phone-hijacking criminal now behind bars, and a US government reward for help catching an Iranian hacking official.

China-Linked Red Heron Turns Gitea Flaw Into a Seven-Country Break-In Spree
Acronis researchers say the group scanned nearly 1,400 self-hosted code servers and singled out 477 systems in Taiwan.

Fake Software Download Sites Push Malware That Turns Off Windows Update
Microsoft says a long-running campaign is pushing rigged installers to Chinese-speaking users and staff at multinationals operating in China, disabling defences on the way in.

The US just seized the servers behind China's hacking-for-hire empire
A private Chinese company quietly ran shared attack tools for state hackers targeting NASA, the Federal Reserve, and US hospitals. The FBI just pulled the plug.

ValleyRAT Malware Hides Inside Signed Chinese Wallpaper App to Bypass Antivirus
Silver Fox is smuggling the ValleyRAT backdoor onto Windows PCs by wrapping it around QN Wallpaper, a legitimate signed program many users have already told their antivirus to trust.

China-Linked 'Fire Ant' Crew Breaks Into Cisco Routers to Steal Passwords and Hide Its Tracks
Sygnia says the espionage group has jumped from VMware servers to core network gear, tampering with logs and siphoning credentials from TACACS authentication servers.

Justice Department Walks Back Claim That U.S. Agencies Were Hacked by China
The DOJ now says agencies including NASA and the Federal Reserve were targeted by Chinese hackers, not breached, a meaningful climb-down in the language of the original announcement.