Latest coverage for China

Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found

Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests

Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware

A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials

A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT

China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands

Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa

ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as continuing activity against organizations around the globe

Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately avoid domestic targets

China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to ESET research

A suspected China-linked threat actor targeted the Indian branch of a global manufacturer leveraging an open source offensive toolkit

A China-linked threat actor backdoored a version of Daemon Tools to infect thousands

Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage

UK government Minister confirms that breached health records of UK Biobank volunteers were up for sale on Chinese ecommerce platforms before being removed

Chinese state-backed group TA416 had suspended its cyber espionage operations in Europe since 2023, noted Proofpoint

The UK government has sanctioned Xinbi, described as “the second-largest illicit online marketplace ever”

Some of these campaigns are linked to Darcula, a Chinese-language phishing-as-a-service platform

UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation

Anthropic accused DeepSeek, Moonshot and MiniMax of illicitly using Claude to steal some of the AI model’s capabilities

Mandiant reveals campaign featuring exploit of a CVSS 10.0 CVE in Dell RecoverPoint for Virtual Machines