Chinese-linked groups use AI agents to attack over 200 organizations in 11 days
CrowdStrike reports China-nexus group Vapor Panda used ARTEX AI framework to attack organizations in 14 countries, installing BloodAlchemy backdoor.
80
Country
Middle East
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenSep 1, 2026
- Last mentioned8d ago
Timeline
3 articles · newest firstGroup Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Kaspersky details PAYLOAD ransomware operators abusing Active Directory GPOs for encryptionless extortion at a Middle East manufacturer, exfiltrating data published on the dark web.
72
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
Kaspersky reports Mirage Kitten targeting aviation and fintech organizations across the Middle East and Africa with new NodeRabbit and PollCat backdoors.
65
Appears with
- Kasperskyvendor · 3
- NodeRabbitmalware · 1
- PollCatproduct · 1
- Europevictim · 1
- Asia and the Middle Eastvictim · 1
- PollCatmalware · 1
- Vapor Pandathreat actor · 1
- Mirage Kittenthreat actor · 1
- BloodAlchemymalware · 1
- CyberStrikeAIproduct · 1
- foreign ministries in Latin Americavictim · 1
- FortiGate SSL VPNproduct · 1
- Middle East manufacturing organizationvictim · 1
- educational institutions in Africa and Latin Americavictim · 1
- DeepSeekai model · 1
- CrowdStrikevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.