Guangdong Chanming Sells Botnet to PLA for Cyber Operations

Guangdong Chanming, a covert Chinese company, has been linked to the sale of a spy botnet to the People's Liberation Army (PLA) and various hacking groups. This botnet serves as an anonymous relay network, facilitating global cyber intrusions while masking their origins. Research by Intrusion Truth revealed that Chanming's tools, including an 'Anonymous Network System,' were sold to military units, confirming its role in state-sponsored cyber operations. The company lacks a public presence and does not appear to sell its products commercially. Investigations uncovered connections between Chanming's shareholders and a previously developed VPN tool, indicating a direct lineage to its current offerings. The implications of this discovery highlight the reliance of sophisticated hacking groups on external vendors for evasion infrastructure.

Key Points: • Guangdong Chanming sold a spy botnet to the PLA and multiple hacking groups. • The company operates without a public-facing business and lacks commercial sales. • Research linked Chanming's tools to military cyber operations, revealing state-sponsored tactics.