UNC5174

China APT UNC5174 Hijacks Discord API as Covert C2 Channel to Evade Detection and Conduct Espionage

• Cybercriminals
• Malware

China APT UNC5174 Hijacks Discord API as Covert C2 Channel to Evade Detection and Conduct Espionage

Do Son December 6, 2025 0

A sophisticated cyber-espionage campaign linked to the Chinese state-sponsored threat group UNC5174 has been discovered utilizing the...

Read More Read more about China APT UNC5174 Hijacks Discord API as Covert C2 Channel to Evade Detection and Conduct Espionage

Zero-Day PoC Published: Privilege Escalation Flaw in VMware Tools Used by Chinese APT

• Vulnerability

Zero-Day PoC Published: Privilege Escalation Flaw in VMware Tools Used by Chinese APT

Do Son September 30, 2025 0

A newly disclosed local privilege escalation vulnerability, CVE-2025-41244, has been exploited as a zero-day in the wild,...

Read More Read more about Zero-Day PoC Published: Privilege Escalation Flaw in VMware Tools Used by Chinese APT

ANSSI Exposes “Houken”: China-Linked Threat Actor Exploiting Ivanti CSA Zero-Days & Deploying Linux Rootkits

• Cyber Security

ANSSI Exposes “Houken”: China-Linked Threat Actor Exploiting Ivanti CSA Zero-Days & Deploying Linux Rootkits

Do Son July 2, 2025 0

The French cybersecurity agency ANSSI has exposed a sophisticated threat actor dubbed Houken. First observed exploiting zero-day...

Read More Read more about ANSSI Exposes “Houken”: China-Linked Threat Actor Exploiting Ivanti CSA Zero-Days & Deploying Linux Rootkits

Chinese Cyberespionage Groups Probe SentinelOne in Sophisticated ShadowPad and PurpleHaze Campaigns

• Cybercriminals

Chinese Cyberespionage Groups Probe SentinelOne in Sophisticated ShadowPad and PurpleHaze Campaigns

Do Son June 10, 2025 0

SentinelLABS has unveiled an extensive report detailing a wave of cyber-espionage activity that directly targeted SentinelOne and...

Read More Read more about Chinese Cyberespionage Groups Probe SentinelOne in Sophisticated ShadowPad and PurpleHaze Campaigns

Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack

• Cyber Security
• Malware

Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack

Do Son June 10, 2025 0

Seqrite Labs APT-Team has uncovered a targeted campaign against China Mobile Tietong Co., Ltd., a prominent subsidiary...

Read More Read more about Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack

UNC5174: Chinese Threat Actor Deploys New VShell RAT in Campaign

• Cyber Security
• Malware

UNC5174: Chinese Threat Actor Deploys New VShell RAT in Campaign

Do Son April 16, 2025 0

The Sysdig Threat Research Team (TRT) has uncovered a new campaign by the Chinese state-sponsored threat actor...

Read More Read more about UNC5174: Chinese Threat Actor Deploys New VShell RAT in Campaign

Chinese State-Linked Hackers Target Critical Systems; Exploit F5 and ScreenConnect Flaws

• Cyber Security
• Malware
• Vulnerability

Chinese State-Linked Hackers Target Critical Systems; Exploit F5 and ScreenConnect Flaws

Do Son March 22, 2024 0

A newly uncovered threat actor designated UNC5174 is behind a series of targeted intrusions exploiting zero-day and...

Read More Read more about Chinese State-Linked Hackers Target Critical Systems; Exploit F5 and ScreenConnect Flaws