Skip to content
Threat Feed

Tag

China

5 briefs RSS
high advisory

Integrity Technology Group Enabling Global Cyber Espionage

The NCSC and international partners have exposed Integrity Technology Group for facilitating global cyber espionage campaigns through AI-powered scanning, large-scale botnets, and manual network exploitation.

cyber-espionage threat-intel china botnet ai-enabled
2t
high threat

China-Linked Espionage Campaign Targeting Global Infrastructure via Integrity Technology Group

Integrity Technology Group, a Chinese for-profit entity, is conducting multi-year cyber espionage targeting government, healthcare, and religious institutions using automated vulnerability scanning, credential harvesting, and specialized data exfiltration tools.

Bash +12 Integrity Technology Group espionage china cyber-espionage microsoft-365 dcsync
3t 6c 2i
high threat

Silver Fox Counterfeit Installer Campaign

An active campaign impersonates legitimate software vendors via look-alike websites to distribute dynamically generated malicious installers that evade detection and establish persistent access.

Silver Fox phishing malware initial-access silver-fox china
3t 2i
high threat

Jewelbug APT Dual-Purpose Espionage and Fraud Operations

Jewelbug, a China-linked mercenary APT, uses a custom C2 platform called XG-Web to conduct both state-sponsored espionage and large-scale cryptocurrency theft using custom backdoors and malicious browser extensions.

Jewelbug apt espionage credential-theft malware china middle-east southeast-asia browser-security
3t
high threat

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

CylindricalCanine, a subgroup of GoldenEyeDog, breached DigiCert in April 2026 by delivering a malicious executable via a customer chat channel, leading to the theft of code-signing certificates which were then used to sign Golden Gh0st RAT malware for distribution, primarily targeting finance organizations and the gambling and gaming sectors.

Code Signing Certificates +2 GoldenEyeDog code-signing-certificate-theft supply-chain-attack malware rat digicert golden-gh0st-rat apt-q-27 phishing +1
2r 10t