China-Nexus Hackers — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
December 5, 2025
Last Seen
July 23, 2026

China-Nexus Hackers is a China-linked APT group that targets enterprise networks, with a focus on virtualization and data-center infrastructure.

Overview

China-Nexus Hackers is a China-linked APT group that targets enterprise networks, with a focus on virtualization and data-center infrastructure. The group is notable for attempting to exploit management plane components such as VMware vCenter, enabling lateral movement and persistence within compromised environments. This underscores the group’s capability to target widely-used virtualization platforms and its significance for enterprise security.

Related Threat Clusters

Recent Intelligence Reports

  • China-Nexus Hackers Breached Hospital X-Rays, Embassy, and Congress With New ... — Techtimes · July 23, 2026
  • China-Nexus Hackers Target VMware vCenter for Malicious Exploits — Cyberpress · December 5, 2025

CVSS v3.1 Breakdown