Tag: china
-
China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks.The strategic positioning activity, which involves implanting and maintaining stealthy access mechanisms within critical environments, has been attributed to Red Menshen, a threat cluster that’s also tracked as Earth Bluecrow, First seen on…
-
US official accuses China of supporting, exploiting cyber scam crisis in Southeast Asia
A senior U.S. official accused China’s government of implicitly backing Chinese criminal syndicates running cyber scam compounds across Southeast Asia and of exploiting a crisis that has resulted in billions being stolen from Americans each year. First seen on therecord.media Jump to article: therecord.media/china-scam-compounds-southeast-asia
-
Researchers release tool to detect stealthy BPFDoor implants in critical infrastructure networks
Telecommunications providers around the world have been dealing with the burrowing efforts of the China-linked APTs for many years now. To help them identify hard-to-detect … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/26/telecom-bpfdoor-detection-script/
-
UK sanctions Chinese crypto marketplace tied to scam compounds
The British government sanctioned Xinbi, a Chinese-language cryptocurrency marketplace accused of enabling large-scale online fraud and human exploitation, in a move targeting the financial infrastructure behind global scam networks. First seen on therecord.media Jump to article: therecord.media/xinbi-crypto-marketplace-sanctioned
-
Mission to smuggle $170 million worth of AI tech to China collapsed for three men
Three individuals, Stanley Yi Zheng, Matthew Kelly, and Tommy Shad English, have been charged with conspiracy to commit smuggling and export control violations after allegedly … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/26/ai-chips-smuggling-scheme-china/
-
Silver Fox Tax Audit Phishing Campaign Shifts from RATs to Python Stealers
Tags: apt, backdoor, china, cyber, cybercrime, exploit, group, intelligence, monitoring, phishing, rat, threat, vulnerabilityThreat intelligence teams have tracked Silver Fox (also known as Void Arachne), a China-based intrusion set that sits at the intersection of financially motivated cybercrime and APT-style espionage. Originally associated with large-scale, profit-driven campaigns, the group has steadily adopted more advanced tradecraft, including modular backdoors, rootkits, and the exploitation of vulnerable drivers. TDR’s monitoring between…
-
Fake Screenshot Lures Target Web3 Support Staff with Multi-Stage Malware Attack
Fake screenshot links are being used to quietly deploy a multi”‘stage backdoor against Web3 customer support teams, in a campaign assessed to be linked to the Chinese financially motivated group APT”‘Q”‘27 (GoldenEyeDog). The operation abuses live chat workflows, signed .NET loaders, AWS S3 dead drops, and DLL sideloading to land a memory”‘resident Farfli backdoor that…
-
New critical Citrix NetScaler hole of similar severity to CitrixBleed2, says expert
CSO in an email, because the hole allows an unauthenticated remote attacker to leak potentially sensitive information from the appliance’s memory.”This vulnerability is one that threat actors and researchers alike are paying attention to,” he said.The vulnerability carries similar ramifications to 2023’s CitrixBleed and 2025’s CitrixBleed2 memory leak vulnerabilities, Emmons added. Then, unauthenticated attackers with…
-
China-Backed Hackers Target Southeast Asian Military Systems in Ongoing Spy Campaign
China-linked threat actors have been identified targeting Southeast Asian military networks in a long-running cyber espionage campaign focused on intelligence collection and operational surveillance. The activity, tracked as CL-STA-1087, demonstrates a highly disciplined approach that combines custom malware, stealth techniques, and long-term persistence. Rather than large-scale data theft, the attackers focus on high-value intelligence such…
-
Police Shut Down 373,000 Dark Web Sites in Single-Operator CSAM Network
Police shut down 373K dark web sites in a one-man CSAM and cybercrime network run by a 35-year-old man in China, with global probe ongoing. First seen on hackread.com Jump to article: hackread.com/police-shut-down-dark-web-sites-csam-network/
-
Openclaw in China: Wechat bekommt inmitten des Hypes Openclaw-Integration
China ist im Openclaw-Rausch. Nun hat auch Tencent die KI-Software in die chinesische App Wechat integriert. First seen on golem.de Jump to article: www.golem.de/news/openclaw-in-china-wechat-bekommt-openclaw-integration-inmitten-eines-hypes-2603-206804.html
-
Behavioral XDR and threat intel nab North Korean fake IT worker within 10 days of hire
Key signs of NK-linked insider infiltration: SpiderLabs has found that these threat actors commonly operate from China rather than North Korea because the internet is more stable and they can employ VPN services to conceal their true geographic origin.Astrill VPN has the ability to bypass China’s Great Firewall and allows threat actors to tunnel traffic…
-
Openclaw in China: Wechat bekommt Openclaw-Integration inmitten eines Hypes
China ist im Openclaw-Rausch. Nun hat auch Tencent die KI-Software in die chinesische App Wechat integriert. First seen on golem.de Jump to article: www.golem.de/news/openclaw-in-china-wechat-bekommt-openclaw-integration-inmitten-eines-hypes-2603-206804.html
-
Supermicro co-founder arrested, charged over $2.5B Nvidia GPU sales to China
Indictment claims dummy servers and bogus docs used to slip past US export controls First seen on theregister.com Jump to article: www.theregister.com/2026/03/20/supermicro_nvidia_gpu_charges/
-
Inside the Growing ‘Cyber Invasion’ Targeting the US
Former DoD CIO Leslie Beavers on Nation-State Attacks and Defense. Leslie Beavers, retired brigadier general and former acting CIO and principal deputy CIO of the Department of Defense, said the United States is already experiencing a cyber invasion, driven by coordinated activity from adversaries including Iran, China, Russia and North Korea. First seen on govinfosecurity.com…
-
TDL 018 – How To Think, Not What To Think – Mitch Prior
Tags: access, ai, apple, attack, backup, blockchain, business, cctv, china, ciso, cloud, computer, conference, control, credentials, cvss, cyber, cybersecurity, data, defense, detection, exploit, finance, firmware, google, infrastructure, intelligence, Internet, iot, jobs, law, mail, malware, military, network, phone, privacy, resilience, risk, router, software, strategy, switch, technology, threat, tool, vulnerability, wifi, zero-trustThe Human Algorithm in a Zero-Trust World In the latest episode of The Defender’s Log, host David Redekop sits down with cybersecurity expert Mitch Prior to discuss the intersection of high-tech security and human intuition. From their first meeting in 2018″, the early days of Zero Trust”, the duo explores why the “why” behind technical…
-
White House AI Policy Blueprint Leaves Key Risks Unresolved
Federal Proposal Pushes AI Adoption While Avoiding Regulatory Detail. The White House AI framework urges rapid deployment and federal alignment to counter China while proposing guardrails on fraud, safety and speech – but leaves unresolved conflicts on IP, content regulation and state preemption that Congress must navigate. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/white-house-ai-policy-blueprint-leaves-key-risks-unresolved-a-31102
-
Texas Gov. Orders State Review of Chinese-Made Medtech
Contec and Epsimed Monitors Containing ‘Backdoors’ Are at the Center of Order. Texas Gov. Abbott has ordered agencies to review foreign-made connected medical devices – especially those from Chinese manufacturers – used in state-owned facilities for cybersecurity issues that could pose security and privacy risks to patients and healthcare infrastructure. First seen on govinfosecurity.com Jump…
-
Breach Roundup: Fancy Bear in Schmancy OpSec Failure
Also, Telus Breach, Microsoft Hotpatching, Interpol Malicious IP Takedown. This week, Russian hacker OpSec failure, Interpol helped disrupt 45,000 malicious IPs, the FBI is looking for an ATM jackpotting suspect and Telus disclosed a breach. Windows hotpatching, an FTP exploit, a foiled attack on a nuclear research center and China-linked espionage. First seen on govinfosecurity.com…
-
Breach Roundup: Fancy Bear in Schmancy OpSec Failure
Also, Telus Breach, Microsoft Hotpatching, Interpol Malicious IP Takedown. This week, Russian hacker OpSec failure, Interpol helped disrupt 45,000 malicious IPs, the FBI is looking for an ATM jackpotting suspect and Telus disclosed a breach. Windows hotpatching, an FTP exploit, a foiled attack on a nuclear research center and China-linked espionage. First seen on govinfosecurity.com…
-
Beijing wants its own quantum-resistant encryption standards rather than adopt NIST’s
Tags: china, compliance, computer, control, cryptography, data, encryption, finance, gartner, international, nist, privacy, technology, threatSecurity, sovereignty, or both: China’s preference for domestic cryptographic standards is not new. It has previously developed its own classical encryption algorithms and mandated their use domestically, requiring foreign technology companies operating in China to support them alongside international standards, according to an analysis published by the Post-Quantum Cryptography Coalition.Sarkar said the motivations behind China’s…
-
EU Sanctions Companies in China, Iran for Cyberattacks
Already sanctioned in the US and the UK, these rulings prohibit companies and a couple of principals from entering or doing business in the European Union. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/eu-sanctions-companies-china-iran-cyberattacks
-
U.S. robotics companies want federal help to keep Chinese robots out of America’s networks
Executives pressed Congress for a strategy as the market and attack surface continues to expand. First seen on cyberscoop.com Jump to article: cyberscoop.com/us-robotics-industry-congress-china-competition/
-
US intelligence chief grilled on absence of election threats in security assessment
Previous clandestine community assessments have documented, at least at a high level, attempts by Iran, Russia or China to sway voters with online propaganda or through cyber operations. First seen on therecord.media Jump to article: therecord.media/us-intel-chief-senate-election-security-threat-assessment
-
EU sanctions Chinese and Iranian actors over cyberattacks on critical infrastructure
EU sanctions Chinese and Iranian firms and individuals for cyberattacks targeting critical infrastructure and over 65,000 devices across member states. The Council of the European Union has imposed sanctions on three companies and two individuals linked to cyberattacks against EU countries and partners. >>The Council adopted today restrictive measures against three entities and two individuals responsible for cyber-attacks carried…
-
EU Belatedly Sanctions Chinese and Iranian Hackers
Chinese Hacking Firm iSoon and Iran’s Emennet Pasargad Among Targets. The European Union sanctioned three Chinese and Iranian hacking operations that have been under U.S. indictments or sanctions for over a year – or, in one case, since 2019. The sanctions freeze assets and forbid EU citizens and companies from funding or otherwise doing business…
-
House Panel Warns of Chinese AI Robotics Threat
AI, Robotics Leaders Warn Chinese Robots Could Disrupt Sensitive Operations. Witnesses told a U.S. House Homeland Security panel that Chinese-developed AI robotics platforms could give Beijing new avenues for surveillance, disruption and physical harm across critical sectors, and urged restrictions on federal use as China expands its industrial dominance. First seen on govinfosecurity.com Jump to…
-
Europe sanctions Chinese and Iranian firms for cyberattacks
The European Union Council has announced sanctions against three entities and two individuals for their involvement in cyberattacks targeting critical infrastructure in the region. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/europe-sanctions-chinese-and-iranian-firms-for-cyberattacks/
-
China Probe: How a Fake Fitness Tracker Became an AI ‘Top Pick’
A fake fitness tracker fooled AI chatbots in China, exposing risks of AI poisoning and prompting calls for regulation. The post China Probe: How a Fake Fitness Tracker Became an AI ‘Top Pick’ appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-fake-tracker-tricks-chatbots-china/
-
China Probe: How a Fake Fitness Tracker Became an AI ‘Top Pick’
A fake fitness tracker fooled AI chatbots in China, exposing risks of AI poisoning and prompting calls for regulation. The post China Probe: How a Fake Fitness Tracker Became an AI ‘Top Pick’ appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-fake-tracker-tricks-chatbots-china/