#china-nexus


Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Oct 2, 2026 // 23:15

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted […]

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

Aug 17, 2026 // 14:57

Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The […]

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

Jul 23, 2026 // 15:20

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across […]

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

Jul 6, 2026 // 13:59

A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate finance teams to deliver a remote access trojan designed […]