Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
|
Description: [AI generated] Laticrete is a leading international manufacturer specializing in the construction industry. They offer innovative solutions in tile and stone installation systems, masonry installation and reinforcement, concrete construction chemicals, restoration, and care of tile/stone products. The company's China branch at "laticrete.com.cn" brings these products and services to the Chinese market.
May 2nd, 2025 (12 days ago)
|
|
Description: A sophisticated adversary-in-the-middle (AitM) attack campaign by a China-linked threat actor dubbed TheWizards, leverages IPv6 SLAAC spoofing to redirect legitimate software updates and infect victims with a modular backdoor known as WizardNet. The campaign, active since at least 2022 and still ongoing as of 2024, centers around a custom-built tool named Spellbinder. This utility facilitates …
The post Chinese Hackers Use IPv6 SLAAC Spoofing to Deliver WizardNet Backdoor appeared first on CyberInsider.
May 1st, 2025 (13 days ago)
|
|
Description: The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam.
May 1st, 2025 (13 days ago)
|
|
Description: A China-aligned APT threat actor named "TheWizards" abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. [...]
May 1st, 2025 (13 days ago)
|
|
April 30th, 2025 (14 days ago)
|
|
Description: Recorded Future News sat down with the deputy assistant director of the FBI’s cyber division at the RSA Conference to talk about the latest updates in countering China-linked hackers.
April 30th, 2025 (14 days ago)
|
|
Description: A China-aligned advanced persistent threat (APT) group called TheWizards has been linked to a lateral movement tool called Spellbinder that can facilitate adversary-in-the-middle (AitM) attacks.
"Spellbinder enables adversary-in-the-middle (AitM) attacks, through IPv6 stateless address autoconfiguration (SLAAC) spoofing, to move laterally in the compromised network, intercepting packets and
April 30th, 2025 (14 days ago)
|
|
April 29th, 2025 (15 days ago)
|
|
Description: Cybersecurity company SentinelOne has revealed that a China-nexus threat cluster dubbed PurpleHaze conducted reconnaissance attempts against its infrastructure and some of its high-value customers.
"We first became aware of this threat cluster during a 2024 intrusion conducted against an organization previously providing hardware logistics services for SentinelOne employees," security
April 29th, 2025 (15 days ago)
|
|
|
Description: A spear-phishing campaign sent Trojanized versions of legitimate word-processing software to members of the World Uyghur Congress as part of China's continued cyber-espionage activity against the ethnic minority.
April 29th, 2025 (15 days ago)
|