Tag: china
-
FBI Seizes Domains Used in Flax Typhoon Attacks
US Authorities Say Infrastructure Supported Scanning, Phishing and Data Theft. The FBI seized seven domains allegedly used by China-linked hackers to scan critical infrastructure, deliver malware and steal files. A joint advisory urges organizations to hunt for lingering access. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-seizes-domains-used-in-flax-typhoon-attacks-a-33049
-
FBI Seizes Domains Used in Flax Typhoon Attacks
US Authorities Say Infrastructure Supported Scanning, Phishing and Data Theft. The FBI seized seven domains allegedly used by China-linked hackers to scan critical infrastructure, deliver malware and steal files. A joint advisory urges organizations to hunt for lingering access. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-seizes-domains-used-in-flax-typhoon-attacks-a-33049
-
FBI Seizes Domains Used in Flax Typhoon Attacks
US Authorities Say Infrastructure Supported Scanning, Phishing and Data Theft. The FBI seized seven domains allegedly used by China-linked hackers to scan critical infrastructure, deliver malware and steal files. A joint advisory urges organizations to hunt for lingering access. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-seizes-domains-used-in-flax-typhoon-attacks-a-33049
-
FBI disrupts Chinese hacking tools used to breach critical infrastructure
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-disrupts-chinese-hacking-tools-used-to-breach-critical-infrastructure/
-
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CISA and NSA. First seen on cyberscoop.com Jump to article: cyberscoop.com/doj-fbi-seize-flax-typhoon-hacking-tools-microscan-fishhub/
-
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Tags: access, breach, china, cybersecurity, email, flaw, government, group, hacker, healthcare, law, technology, toolHackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said on October 8.The company, Integrity Technology Group, has been sanctioned by the U.S. and the UK. The hackers scanned websites for flaws using…
-
Chinese Hacker Deployed AI in Campaign Against South Korean Banks
CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-hacker-ai-korean-banks/
-
Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets
Tags: ai, breach, china, cyber, data-breach, finance, hacker, infrastructure, open-source, penetration-testing, toolA financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from late September to early October 2026, the operation combined ARTEX, an open-source penetration testing platform developed in China, with multiple large language models. Researchers recovered exposed operational files that documented the attacker’s infrastructure, prompts, and…
-
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM.The reward is for information leading to his identification or location, the news outlet NTD…
-
U.S. Offers $10 Million Reward for Chinese Hacker Behind Alleged COVID-19 Research Cyberattacks
The U.S. Department of State is offering a reward of up to $10 million for information regarding Zhang Yu, a Chinese national accused of participating in cyberattacks that targeted American COVID-19 research. This initiative, part of the Rewards for Justice program, seeks information about Zhang, his associates, and their malicious cyber activities. Zhang is alleged…
-
China Could Coerce Taiwan by Hacking Comms, Think Tank Warns
War Game Pits Taiwan’s Telecom Sector Against China. A concerted Chinese attempt to take over neighboring Taiwan is more likely to involve cyber-enabled economic warfare rather than outright invasion, warns a Washington, D.C. national security think tank. Beijing has long asserted sovereignty over Taiwan. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/china-could-coerce-taiwan-by-hacking-comms-think-tank-warns-a-33034
-
China Could Coerce Taiwan by Hacking Comms, Think Tank Warns
War Game Pits Taiwan’s Telecom Sector Against China. A concerted Chinese attempt to take over neighboring Taiwan is more likely to involve cyber-enabled economic warfare rather than outright invasion, warns a Washington, D.C. national security think tank. Beijing has long asserted sovereignty over Taiwan. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/china-could-coerce-taiwan-by-hacking-comms-think-tank-warns-a-33034
-
China Could Coerce Taiwan by Hacking Comms, Think Tank Warns
War Game Pits Taiwan’s Telecom Sector Against China. A concerted Chinese attempt to take over neighboring Taiwan is more likely to involve cyber-enabled economic warfare rather than outright invasion, warns a Washington, D.C. national security think tank. Beijing has long asserted sovereignty over Taiwan. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/china-could-coerce-taiwan-by-hacking-comms-think-tank-warns-a-33034
-
US posts $10 million reward for accused Chinese ‘Hafnium’ hacker
U.S. officials say Zhang Yu was a prominent figure in the Hafnium campaign, which saw hackers breach thousands of computers and steal troves of documents. First seen on therecord.media Jump to article: therecord.media/accused-hafnium-hacker-zhang-yu-10million-reward
-
South Korean officials believe AI agents were used to hack several banks
The personal data of at least 68,000 people was reportedly exposed in breaches of at least seven financial institutions, with officials saying they believe a Chinese cybersecurity tool was used to hack the banks’ systems. First seen on therecord.media Jump to article: therecord.media/south-korean-bank-hacks-ai-agents
-
Researcher Infiltrates Chinese Crime Syndicate Laundering Crypto for Lazarus Group
Tags: blockchain, breach, china, crime, crypto, cyber, exploit, group, intelligence, korea, lazarus, north-korea, organizedBlockchain investigator ZachXBT has revealed that he infiltrated a Chinese organized crime syndicate believed to have laundered over $1 billion through cryptocurrency exploits linked to North Korea’s Lazarus Group. In a disclosure on October 5, 2026, he said he posed as a customer to gather intelligence that helped freeze stolen assets and link criminal conversations…
-
Chinese Hackers Impersonate US Officials for AI Cyber Espionage
An emerging threat group known as TA419 established seemingly legitimate professional relationships with AI policy experts working for US think tanks, universities, and legal organizations. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-actor-impersonates-us-officials-cyber-espionage
-
California Man Charged in Alleged $300M AI Server Smuggling Scheme to China
A California tech executive faces federal charges over an alleged $300 million scheme to route export-controlled AI servers to China through Southeast Asia. The post California Man Charged in Alleged $300M AI Server Smuggling Scheme to China appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-california-ai-server-smuggling-china/
-
MI5 Raises Alarm Over Chinese Funding of UK Academic Research
MI5 warns UK universities that over 100 academics may have unknowingly worked on research funded by a Chinese institute linked to the MSS. On September 30, MI5 published a formal warning naming the China General Technology Research Institute, CGTRI, also called CAGT in some translations, as an outfit with very strong ties to China’s Ministry…
-
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations.The campaigns have impersonated prominent economists and AI policymakers, as well as a prominent Anthropic employee, to single out an AI policy expert at…
-
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing’s state security service.In a “Security Service Espionage Alert” issued on September 30, 2026, MI5 said the “primary purpose of the China General Technology Research Institute (CGTRI) ä¸å›½é€šç, ¨æŠ€æœ¯ç , 究院…
-
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
Tags: attack, china, exploit, flaw, government, infrastructure, microsoft, ransomware, threat, tool, vulnerabilityThe suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries.The activity, observed by the Symantec and Carbon Black Threat Hunter Team, has hit critical infrastructure, government, and education organizations.”In the First seen on thehackernews.com Jump…
-
Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel
Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian governments. Cisco Talos has been tracking a cluster of espionage activity since September 2025 that it calls UAT-11587, and by July 2026 the group had hit at least 16 government and policy organizations across eight…
-
UK and Europe at risk from Chinese tech, says security think tank
Although the UK and Europe have laws to restrict Chinese technology from critical infrastructure, implementation is patchy First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651406/UK-and-Europe-at-risk-from-Chinese-tech-says-security-think-tank
-
Chinese Open-Weight Models Closing In, Anthropic Warns
Researchers Find GLM-5.3 Safeguards Easy to Bypass. Anthropic conducted its own security assessment of GLM-5.3 from Chinese lab Zhipu AI, also known as Z.ai, and found that the model has strong capabilities for autonomously building end-to-end cyber exploits but lacks meaningful safeguards to limit its misuse. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/chinese-open-weight-models-closing-in-anthropic-warns-a-33009
-
Phishing Toolkit Taps Social Media Posts and Advertisements
Adversary-in-the-Middle Attacks Come Courtesy of Chinese-Language ‘Milk Dragon’ Kit. Want to amass more phishing scam victims? Offering targets soon-to-expire discounts on well-known consumer brand items is one of the strategies being practiced by subscribers to a Chinese-language, adversary-in-the-middle phishing toolkit called Nailong, aka Milk Dragon. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/phishing-toolkit-taps-social-media-posts-advertisements-a-33006
-
Warlock ransomware breach SharePoint in water, telecom operator attacks
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks/
-
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor.The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deployment of a previously undocumented backdoor codenamed Antino. Cisco Talos is tracking the cluster First…
-
State-linked actor targets US AI policy experts in credential phishing campaigns
The China-linked espionage attacks were designed to gain insight into the country’s strategy and regulatory environment. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/state-linked-actor-us-ai-policy-experts-credential-phishing/831887/
-
Chinese spies impersonate White House, Anthropic figures to phish AI policy experts
A China-aligned espionage group has been posing as a former White House official and a prominent economist to get into the cloud accounts of AI policy experts in the US, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/02/china-aligned-ta419-phishing-ai-policy-experts/