THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG GroupPalo Alto Unit 42·Jun 6, 12:19 UTC · Jun 6, 2024VulnerabilityCVE-2021-26855CVE-2021-2706560
DragonRank, a Chinese-speaking SEO manipulator service providerCisco Talos·Sep 10, 04:00 UTC · Sep 10, 2024Vulnerability42
PlugX Uses Legitimate Samsung Application for DLL SidePalo Alto Unit 42·Nov 1, 09:43 UTC · Nov 1, 2018VulnerabilityCVE-2012-015835
Chinese cyberspies used a new PlugX variant, dubbed THOR, in attacks against MS Exchange ServersSecurity Affairs·Jul 28, 16:18 UTC · Jul 28, 2021Vulnerability42
Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange ServersRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2018Vulnerability in the wildCVE-2021-26855CVE-2021-27065CVE-2021-26857+1 CVEs60
China-Linked TA416 Targets European Governments with PlugX and OAuthThe Hacker News·Apr 3, 17:34 UTC · Apr 3, 2026VulnerabilityCVE-2025-31324CVE-2025-099460
Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugXThe Hacker News·Jul 4, 06:06 UTC · Jul 4, 2023Vulnerability42
The rush for CVE-2013-3906Kaspersky Securelist·Nov 14, 16:58 UTC · Nov 14, 2013VulnerabilityCVE-2013-390647
Chinese-Linked Hackers Exploit Windows Flaw to Spy on EU DiplomatsInfosecurity Magazine·Oct 31, 12:10 UTC · Oct 31, 2025Vulnerability55
China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 DevicesThe Hacker News·Jun 18, 09:27 UTC · Jun 18, 2024Vulnerability in the wild60
China-Linked Hackers Exploit Windows Shortcut Flaw to Target European DiplomatsThe Hacker News·Nov 8, 05:26 UTC · Nov 8, 2025VulnerabilityCVE-2025-949135
APT trends report Q2 2020Kaspersky Securelist·Jul 29, 10:00 UTC · Jul 29, 2020VulnerabilityCVE-2019-1014947
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
SmugX: Chinese APT uses HTML smuggling to target European Ministries and embassiesSecurity Affairs·Jul 3, 18:25 UTC · Jul 3, 2023Vulnerability42
Roaming Tiger Hackers targets Russian organizationsSecurity Affairs·Aug 18, 17:54 UTC · Aug 18, 2018VulnerabilityCVE-2012-0158CVE-2014-176147
Chinese TA459 APT exploits CVE-2017Security Affairs·May 3, 13:30 UTC · May 3, 2017VulnerabilityCVE-2017-019947
Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)Help Net Security·Dec 5, 09:00 UTC · Dec 5, 2025VulnerabilityCVE-2025-949160
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System AccessThe Hacker News·Nov 30, 09:05 UTC · Nov 30, 2025VulnerabilityCVE-2025-59287160
Microsoft Targeted by 8 of 10 Top Vulnerabilities in 2018Recorded Future·Aug 11, 00:00 UTC · Aug 11, 2025Vulnerability in the wildCVE-2017-0199CVE-2016-0189CVE-2017-8750+8 CVEs60
HenBox: The Chickens Come Home to RoostPalo Alto Unit 42·Jan 18, 21:13 UTC · Jan 18, 2019Vulnerability30
Microsoft Silently Patches Windows LNK Flaw After Years of Active ExploitationThe Hacker News·Dec 4, 04:31 UTC · Dec 4, 2025Vulnerability in the wildCVE-2025-949160
Two Windows vulnerabilities, one a 0Ars Technica · Security·Oct 31, 21:03 UTC · Oct 31, 2025Vulnerability in the wildCVE-2025-949160
China's Influence on National Network Vulnerability PublicationsRecorded Future·Oct 21, 00:00 UTC · Oct 21, 2025VulnerabilityCVE-2017-0199160
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems WorldwideThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-4299960
China-linked hackers could be behind cyberattacks on Russian state agencies, researchers sayThe Record·Aug 13, 13:54 UTC · Aug 13, 2024Vulnerability42
Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView PlusThe Hacker News·Jul 5, 03:27 UTC · Jul 5, 2024VulnerabilityCVE-2023-2071CVE-2023-29464CVE-2024-2369260
Researchers Uncover Chinese Nation State Hackers' Deceptive Attack StrategiesThe Hacker News·Mar 24, 13:33 UTC · Mar 24, 2023Vulnerability42
Chinese Hackers Targeting South American Diplomatic Entities with ShadowPadThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2023VulnerabilityCVE-2022-2946460
Chinese Hackers Infiltrate South American Diplomatic NetworksInfosecurity Magazine·Feb 14, 17:00 UTC · Feb 14, 2023Vulnerability30
Winnti continues to target game developers in Russia and out of ChinaSecurity Affairs·Jan 15, 14:14 UTC · Jan 15, 2021VulnerabilityCVE-2020-079647
Cycldek: Bridging the (air) gapKaspersky Securelist·Jun 3, 10:00 UTC · Jun 3, 2020VulnerabilityCVE-2012-0158CVE-2017-11882CVE-2018-0802135
IT threat evolution Q2 2019Kaspersky Securelist·Aug 19, 10:00 UTC · Aug 19, 2019VulnerabilityCVE-2018-812047
Fresh Baked HOMEKit-made CooklesPalo Alto Unit 42·Nov 1, 10:21 UTC · Nov 1, 2018VulnerabilityCVE-2012-015835
Operation Red Signature - South Korean Firms hit with supply chain attackSecurity Affairs·Aug 23, 06:53 UTC · Aug 23, 2018VulnerabilityCVE-2017-726947
Panda Emissary APT specialized in defence aerospace projectsSecurity Affairs·Jun 13, 20:38 UTC · Jun 13, 2018VulnerabilityCVE-2011-3544CVE-2010-073847