Tag

#China

55 stories taggedChina.

Illustration: a dim server room aisle in a government data centre
Threat Intelligence

Ten governments name a Shanghai contractor as the engine behind China's data-theft campaigns

A joint advisory led by CISA and the FBI pins years of intrusions on Integrity Technology Group and lists eight old, unpatched flaws the operators keep riding into critical infrastructure.

4 min read
Illustration: a dim office desk at night, a laptop open showing a blurred generic blue corporate login form
Threat Intelligence

China-linked hackers posed as Anthropic staff to phish U.S. AI policy experts

A group tracked as TA419 ran fake-login pages that could capture passwords and the one-time codes meant to stop them.

4 min read
Illustration: a dim server room with rows of blue indicator lights, one rack door hanging ajar
Ransomware

Warlock keeps hitting SharePoint servers across Latin America and Iberia, Symantec says

The ransomware group is still breaking into Microsoft SharePoint servers in Portuguese and Spanish-speaking countries, hitting hospitals, government offices and schools.

3 min read
Illustration: a dim government office at night in an East Asian capital
Threat Intelligence

China-Linked Spies Hide Inside Outlook and OneDrive to Steal Asian Government Secrets

A newly documented backdoor called Antino is sitting on at least 16 government networks across eight Asian countries, and it talks to its handlers through legitimate Microsoft 365 traffic.

3 min read
Macro photograph of green circuit board traces glowing faintly in low light, with one section subtly illuminated in amber suggesting a hidden active signal bene
Threat Intelligence

NeedyMantis: The Hidden Malware That Moves In After the Break-In

Microsoft has named a previously unknown malware family being used against telecoms, universities, and government contractors. The group behind it is linked to China. And once it's inside a network, it's built to stay quiet.

4 min read
A threat intelligence dashboard displaying data flow arrows pointing from multiple locations to major AI model diagrams, with geographic markers and attribution
AI Security

US Agencies Say Chinese AI Firms Are Stealing From American Models at Industrial Scale

A joint NSA, CISA and FBI advisory names DeepSeek, Alibaba, Moonshot AI, MiniMax, StepFun and Z.AI as running organised campaigns to copy the inner workings of Claude, GPT, Gemini and Grok.

4 min read
Multiple computer monitors displaying cascading code and exploit payloads, with Windows logos and Chrome browser icons arranged across screens in a dimly lit op
Threat Intelligence

Four Spy Crews Fired the Same Chrome and Windows Exploit Kit in One Week

Researchers say a previously unseen toolkit called BlueMoon, first used by China-linked APT31, was shared across multiple espionage groups to break into browsers and take over Windows machines.

4 min read
A Windows desktop with a keyboard input tool interface in the background subtly transforming into a command-and-control dashboard, system access icons appearing
Threat Intelligence

China-linked hackers slipped a backdoor onto PCs through Sogou, a popular Chinese typing tool

Researchers tracking the cluster as UNC3569 say a single crafted link was enough to hand attackers full control of a victim's Windows machine.

3 min read
A security operations center with multiple monitors displaying alert systems, one showing a SIM card symbol with warning indicators, another with an internation
Threat Intelligence

Invisible Characters, SIM Swap Jail Time, and a $10 Million Bounty: This Week's Security Briefing

A trick that hides malicious text from spam filters, a phone-hijacking criminal now behind bars, and a US government reward for help catching an Iranian hacking official.

3 min read
A map showing Taiwan and six other countries highlighted, with a network diagram overlaid displaying Gitea repository servers and scanning patterns radiating ou
Threat Intelligence

China-Linked Red Heron Turns Gitea Flaw Into a Seven-Country Break-In Spree

Acronis researchers say the group scanned nearly 1,400 self-hosted code servers and singled out 477 systems in Taiwan.

3 min read
A computer screen showing a fake software download webpage that mimics legitimate sources, with Windows Update settings disabled in the system tray
Threat Intelligence

Fake Software Download Sites Push Malware That Turns Off Windows Update

Microsoft says a long-running campaign is pushing rigged installers to Chinese-speaking users and staff at multinationals operating in China, disabling defences on the way in.

3 min read
An FBI field office with law enforcement and cyber agents gathered around seized server equipment, network diagrams showing connections to targeted government a
Threat Intelligence

The US just seized the servers behind China's hacking-for-hire empire

A private Chinese company quietly ran shared attack tools for state hackers targeting NASA, the Federal Reserve, and US hospitals. The FBI just pulled the plug.

5 min read
A Windows PC startup screen with a wallpaper application installer window open, system security warnings visible in the taskbar, antivirus trust indicators high
Threat Intelligence

ValleyRAT Malware Hides Inside Signed Chinese Wallpaper App to Bypass Antivirus

Silver Fox is smuggling the ValleyRAT backdoor onto Windows PCs by wrapping it around QN Wallpaper, a legitimate signed program many users have already told their antivirus to trust.

3 min read
A network operations center with multiple screens showing Cisco router interfaces, authentication logs scrolling rapidly, some entries marked as tampered or del
Threat Intelligence

China-Linked 'Fire Ant' Crew Breaks Into Cisco Routers to Steal Passwords and Hide Its Tracks

Sygnia says the espionage group has jumped from VMware servers to core network gear, tampering with logs and siphoning credentials from TACACS authentication servers.

4 min read
Illustration: The Department of Justice building facade photographed at angle
Policy & Regulation

Justice Department Walks Back Claim That U.S. Agencies Were Hacked by China

The DOJ now says agencies including NASA and the Federal Reserve were targeted by Chinese hackers, not breached, a meaningful climb-down in the language of the original announcement.

4 min read
© 2026 Threat Vectr