ThreatCluster

Chinese Hackers Target WSUS Vulnerability to Distribute ShadowPad Malware

First seen 23 Nov 2025, 03:35 UTC •GbhackersCybersecuritynews •100% similarity •49

Article Content

Browse articles
ThreatCluster

Chinese hackers are exploiting a remote code execution vulnerability in Windows Server Update Services (WSUS) to deploy ShadowPad malware. This attack affects organizations using WSUS for patch management, potentially compromising sensitive data and systems. The exploitation of this vulnerability highlights the ongoing threat posed by advanced persistent threat (APT) groups.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

ShadowPad WSUS Malware