Graphican Backdoor Dissection
Researchers have spotted the activities of APT15 (Vixen Panda), a Chinese state-sponsored threat group that has developed a fresh backdoor known as Graphican. The campaign spanned from 2022 to 2023…
Barracuda Vulnerability Exploit Attributed to China
Resesrchers attributed the recently discovered hacking campaign targeting Barracuda ESG customers were launched by China-linked hackers. On May 19, Barracuda discovered a hacking campaign targeting customers of its email security…
Chinese Espionage Campaign Targeting ESXi Hosts
Reesearchers have spotted n espionage campaign by Chinese threat actor UNC3886 targeting VMware ESXi hosts and have quietly been exploiting a zero-day authentication bypass flaw in the virtualization technology to…
SonicWall SMA 100 Devices targeted by Persistent Malware
A suspected Chinese linked campaign that maintains long-term persistence by running malware on unpatched SonicWall SMA 100 Series appliances has functionality that can steal user credentials, provide shell access, and…
Dragon Spark – A Chinese Threat Actor Seen using SparkRAT
Researchers have discovered that organizations in Taiwan, Hong Kong, Singapore, and China have been recently facing attacks from Chinese threat actor DragonSpark. The threat actor was found to be using…
Citrix releases patches for flaws exploited by APT5
Citrix has released a patch for a critical flaw affecting Citrix ADC and Citrix Gateway, and it is aware of attacks against the vulnerability in the wild. The vulnerability, tracked…
UNC4191 Relies on USB in New Campaign
Mandiant experts shared their findings about the new campaigns, attributing them to a China-based threat actor called UNC4191, that relies on USB devices as an initial infection vector This campaign…
Bronze President- Espionage from China
A Chinese cyberespionage group named Bronze President, which also goes by the name Mustang Panda, has been using a malware named PlugX to target the computers of political leaders across…