China

Gbhackers •Mayura Kathir • July 15, 2026

A suspected China-linked threat actor has integrated Anthropic’s Claude Code and DeepSeek-v4-pro into an active intrusion campaign targeting government entities, Taiwanese industry, and financial-services organizations. TencShell was first documented by Cato CTRL in May and assessed as linked to suspected China-based activity. A shared HTTP header fingerprint on port 111111111111 led researchers to 131313 Hong […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Weaponize AI Tools in Cyber Espionage Campaign Chinese-linked threat actors have integrated Anthropic's Claude Code and DeepSeek-v4-pro into a cyber espionage campaign targeting government entities and financial organizations in Taiwan. The operation utilizes TencShell command-and-control infrastructure, which was previously documented by Cato CTRL in May 2026. Researchers from Hunt have confirmed that these AI tools are embedded within the core execution flows of the attacks, indicating a sophisticated level of integration. The campaign is currently active, posing significant risks to the targeted sectors. The specific vulnerabilities exploited and the number of affected organizations remain unspecified, but the implications for national security and economic stability are considerable. 4 sources 75

Extracted Entities

China

The full story

Extracted Entities

Countries (1)

Industries (2)

Malware (1)

Tools (2)