Bleepingcomputer Chinese Hackers Exploit Windows Vulnerability to Target European Diplomats
Article Content
Browse articles 
A Chinese-linked hacking group, UNC6384, has been exploiting a Windows shortcut vulnerability to conduct cyber espionage against European diplomats in Hungary, Belgium, and other nations. The attacks involve spear phishing emails that deliver malicious LNK files, leading to the deployment of PlugX malware. This campaign has been linked to social engineering tactics centered around diplomatic events and has been active since September 2025.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
More articles in this cluster (4)
Following this threat?
Track Mustang Panda, PlugX and CVE-2025-9491 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Mustang Panda Escalates Cyberattacks on European Maritime Sector Chinese hacking group Mustang Panda has intensified cyberespionage campaigns targeting maritime organizations across at least seven EU member states throughout 2025. The European Union Agency for Cybersecurity (ENISA) reported that these attacks primarily focus on espionage and strategic intelligence collection, with… 
Chinese TA419 Group Targets AI Policy Experts with Phishing Campaigns The Chinese cyberespionage group TA419 has been targeting U.S. AI policy experts through credential phishing campaigns. These attacks, documented by Proofpoint, involved impersonating a former White House OSTP official and prominent economists to gain access to sensitive accounts. The phishing tactics employed…