VAPOR PANDA initiated a global espionage campaign starting October 17, 2026, leveraging the AI-driven ARTEX framework along with DeepSeek and commercial large language models to conduct simultaneous intrusions against over 200 organizations worldwide. Targets included foreign ministries in Latin America, Europe, Asia, and the Middle East, as well as U.S. semiconductor, defense, pharmaceutical, nuclear, and telecommunications sectors. The adversary deployed the BLOODALCHEMY backdoor, performed credential spraying, and directed AI agents to identify systems lacking endpoint security sensors. This campaign marks a shift from single intrusions to multiple autonomous attack paths coordinated by AI agents under human strategic guidance in Chinese. It highlights the use of open-source AI combined with commercial LLMs to scale intrusion operations beyond manual capabilities.
The FBI disrupted Chinese state-sponsored hacking operations by seizing seven domains used by the Flax Typhoon group and its contractor, Integrity Technology Group. The seized infrastructure supported two hacking tools, MicroScan and FishHub, which were used to scan for vulnerabilities, breach critical infrastructure, and conduct spear-phishing attacks globally. The tools targeted organizations including power companies, airports, universities, and government agencies across multiple countries. The FBI and international partners issued a joint advisory detailing the attackers' methods, targeted vulnerabilities, and indicators of compromise. The disruption aims to hinder China-linked cyber operations against U.S. and allied networks.
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]
A sophisticated multi-component malware campaign targets telecommunications and network-edge appliances using BPFDoor variants and a newly identified implant called AVERAT. The attackers exploit SMTP traffic on port 25 to hide command-and-control communications within legitimate mail relay activity. The malware uses memory-only execution to avoid leaving forensic artifacts on disk. BPFDoor variants impersonate legitimate processes on South Korean systems, while AVERAT targets Taiwanese appliances with regional disguises. The operation employs compromised consumer devices as relays, consistent with a China-linked covert network. The campaign demonstrates advanced evasion techniques including process spoofing and encrypted configurations.
In July 2026, China-aligned threat actor TA419 conducted credential phishing campaigns impersonating prominent economists and AI policymakers, targeting AI experts at US think tanks, universities, and legal organizations. The group sent benign conversation starter emails themed around AI policy topics, such as invitations to join an AI Policy Advisory Committee. Upon receiving responses, TA419 deployed multi-stage URL redirection chains leading to Adversary-in-the-Middle credential phishing pages using a customized Frameless Browser-in-the-Browser tool. Active since April 2025, TA419 consistently targets individuals at US and Japan-based think tanks, defense contractors, universities, and law firms. This activity likely supports Chinese intelligence objectives to monitor US AI policy and regulatory developments amid strategic competition involving AI technologies, model distillation concerns, and export controls between the US and China.
A China-nexus threat cluster designated UAT-11587 has been targeting government and policy organizations across eight Asian countries since September 2025, delivering a previously undocumented Rust-compiled backdoor called Antino. The campaign primarily affected Taiwan, India, Philippines, Cambodia, Pakistan, Thailand, Myanmar, and Syria through sophisticated spear-phishing operations using tailored political and diplomatic lures. The multi-stage infection chain leverages Cloudflare infrastructure for delivery and deploys Antino, which uniquely uses Microsoft 365 services—specifically Outlook and OneDrive—as dead-drop command-and-control channels rather than traditional C2 servers. The backdoor supports reconnaissance, command execution, file transfer, shellcode loading, and persistence establishment. Attribution to Chinese nexus is based on metadata containing Simplified Chinese artifacts, UTC+8 timestamps, use of China-focused Rust package mirrors, and targeting patterns consistent with Chinese intellige...
Cisco Talos identified a China-nexus cyber espionage campaign named UAT-11587 targeting government and policy organizations across Asia, including Taiwan, India, the Philippines, and Cambodia. The campaign uses spear-phishing emails with tailored decoy documents to deliver a Rust-compiled Windows backdoor called Antino. Antino supports host reconnaissance, shell and PowerShell execution, file transfer, in-memory shellcode loading, and persistence. Its command-and-control communication uniquely operates through Microsoft 365 applications using Microsoft Graph to interact with Outlook and OneDrive. The campaign has affected at least 16 institutional environments across eight Asian countries with approximately 350 compromised endpoints. Talos assesses this activity as an intelligence gathering operation with moderate to high confidence. No patch or remediation guidance is provided in the report.
NeedyMantis is a modular malware framework used by a China-based threat actor in targeted attacks against telecommunications, government, scientific, manufacturing, retail, medical non-profit, and intergovernmental organizations primarily in Belarus, Russia, and Thailand. It was discovered following the May 2026 Daemon Tools supply chain attack, where thousands of computers were infected. The malware uses a custom executable file format and DLL sideloading for persistence and evasion. It is deployed after initial access to maintain long-term presence and support follow-on operations. The malware communicates with command-and-control servers via WebSockets and can load additional modules to extend its capabilities. The threat actor group behind this malware, Storm-3069, is not attributed to a Chinese nation-state actor. Microsoft has provided a detailed technical analysis but no patch or remediation guidance is indicated.
NeedyMantis is a modular post-compromise malware family deployed in limited targeted operations affecting telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Active since at least October 2025, the malware is typically deployed after threat actors have established access, serving to maintain long-term persistence and support follow-on operations. Its architecture combines multiple loaders, custom encrypted file archives, a custom executable file format, and modular components enabling operators to evade analysis and extend functionality. The malware employs DLL sideloading, WebSockets-based command-and-control communications, and RC4 encryption. Activity aligns with China-based threat actors, with Storm-3069 identified as one operator using NeedyMantis following the DAEMON Tools supply chain compromise.
The US and China have agreed to establish a communication channel specifically for artificial intelligence-related incidents as part of broader diplomatic talks. This initiative aims to facilitate dialogue on AI risks and benefits and to prevent crises related to AI developments. The agreement was reached during a summit between the two countries' leaders, alongside continued cooperation on trade and military crisis communications. No specific technical vulnerabilities or exploits are described. The agreement reflects diplomatic efforts to manage AI risks at a governmental level rather than addressing a direct cybersecurity threat.
SparroWocky is a sophisticated C++ backdoor used by the China-aligned FamousSparrow APT group since August 2025. It targets governmental organizations in Latin America with advanced evasion and modular capabilities. The backdoor uses reflective loading, call stack spoofing, encrypted communications, and host process camouflage to avoid detection. It replaces a previous backdoor called SparrowDoor and incorporates open-source projects within its codebase. The threat actor's focus aligns with geopolitical interests in monitoring Latin American governmental responses to US pressures.
The FamousSparrow espionage group, linked to China, has deployed a new backdoor malware named SparroWocky targeting government organizations in Latin America since mid-2025. SparroWocky is a modular C++ backdoor with advanced anti-analysis and evasion techniques, including DLL side-loading, runtime code patching, and thread creation interception to disguise malicious activity. It enables extensive system reconnaissance, file operations, screenshot capture, process creation, and network proxying. Persistence is maintained via Windows services or registry keys. The malware communicates with multiple command-and-control servers over common ports and proxies. The attacks aim to gather intelligence on Latin American governments' responses to U.S. pressure on Chinese economic interests.
Mythic is an open-source command-and-control (C2) framework used by red teams and threat actors. Analysis found 131 unique Mythic C2 hosts exposed on the public Internet, with most using default TLS certificates. These deployments span major cloud providers and are concentrated in the US, Hong Kong, and China. Default artifacts such as TLS certificates with O=Mythic and port 7443 responses enable detection. Some clusters appear to be training environments, while isolated deployments with custom domains and advanced transport methods like Discord and steganography indicate operational use.
The United States has declared a national emergency to secure the bulk power system by imposing restrictions under the Trade Agreement Act (TAA) and banning the purchase or installation of equipment from China and other specified countries into the Bulk Power Systems (BPS). This executive order aims to protect critical electric infrastructure from potential threats related to foreign equipment. The announcement has generated discussion regarding compliance methods and the overall effectiveness of these restrictions.
An active malware campaign utilizes fraudulent software-download websites impersonating trusted vendors to distribute malicious installers. The operation primarily targets China-based operations of multinational organizations and Chinese-speaking users across healthcare, manufacturing, gaming, technology, logistics, government, and education sectors. The malicious installers deploy malware capable of establishing persistence, disabling Windows Update services, configuring Microsoft Defender exclusions, deleting volume shadow copies, and establishing command-and-control communications. Microsoft attributes this activity with moderate confidence to the Chinese threat cluster Silver Fox, known for using spoofed vendor download pages to distribute remote access trojans. The campaign leverages high-fidelity clones of legitimate vendor websites hosted on Chinese domains, delivering server-side generated payloads through ZIP archives.
A malware campaign uses counterfeit software-download websites impersonating trusted vendors to distribute malicious installers. The activity primarily targets China-based operations of multinational organizations and Chinese-speaking users across healthcare, manufacturing, gaming, technology, logistics, government, and education sectors. Malicious installers deploy payloads that establish persistence, disable security protections, and communicate with attacker-controlled infrastructure. The campaign employs dynamically generated installers with rotating hashes, spoofed vendor pages on .com.cn and .hl.cn domains, and randomized payload staging paths. Follow-on activity includes disabling Windows Defender, deleting shadow copies, neutralizing Windows Update, creating scheduled tasks for persistence, and establishing command-and-control over non-standard ports. Microsoft assesses this activity aligns with publicly reported Silver Fox operations but has not attributed it to a nation-state actor.
Three distinct implants—SPEAKINGSTONE, DARKLANTERN, and ENDLESSDOORS—have been discovered embedded in ZBT router firmware distributed through a global supply chain reaching the United States, Canada, Australia, Philippines, Germany, and Russia. DARKLANTERN is an unauthenticated UDP backdoor listening on port 9992, offering root shell access from the internet with trivial MAC address bypass. SPEAKINGSTONE is a phone-home surveillance implant that beacons to ZBT's cloud infrastructure, capable of DNS hijacking, ISP credential theft, and remote command execution. A sinkholed backup domain revealed 392 devices, 390 located in China, primarily on China Mobile's network. Internet scans identified 203 DARKLANTERN instances across 22 countries. These implants use plaintext protocols without authentication, making them hijackable by any network adversary. The affected hardware appears in white-labeled consumer products sold through mainstream retailers, representing embedded surveillance capabilities in commerciall...
A China-linked cyber espionage infrastructure provider operates a multi-component 'quartermaster' system that offers reconnaissance, proxy orchestration, and traffic routing services to Chinese state-sponsored actors. The infrastructure includes QScan for reconnaissance, Fast Labyrinth for encrypted relay networks using commercial proxy services, QTRouter for proxy access management, and QTProxy for operational node control. It targets research universities, defense networks, government agencies, and critical infrastructure worldwide, with notable focus on the U.S., U.K., and Asia-Pacific regions. The operation leverages commercial proxy services designed to bypass China's Great Firewall, enabling multiple threat actors to maintain anonymity and coordinate operations via shared infrastructure. This represents an advanced evolution in state-enabled cyber espionage capabilities.
Researchers at Kaspersky have identified the first malware specifically designed to target car head units, linking it to the BadBox botnet. The malware was found on an Android-based aftermarket infotainment system from the Chinese company DoFun, widely used in China and other APAC countries. Attackers exploited a vulnerability in the system's software update mechanism to deliver malicious Android applications that act as droppers, loaders, clickers, and reverse-proxy loaders. The malware supports multiple commands, primarily used to download a reverse proxy module, indicating its main purpose is to incorporate infected devices into a proxy botnet. The vendor has addressed the vulnerability after notification. The BadBox botnet has been active since at least 2023, primarily targeting Android devices such as TV boxes, and has grown to include millions of devices. This development shows an expansion of BadBox operators' delivery methods and targets to vehicle infotainment systems.
Taiwanese prosecutors charged nine individuals, including employees from Nvidia and Super Micro, for illegally exporting high-end AI servers to mainland China. These servers contained banned graphics processing units (B300 GPUs) restricted under U.S. export controls. The shipments circumvented regulations through multiple routes including Indonesia, Japan, and Hong Kong. The case highlights ongoing tensions and regulatory enforcement in the AI infrastructure competition between the U.S. and China.
