Related Threat Clusters
-
Chinese Threat Group Exploits Roundcube Vulnerabilities in University Networks
A suspected China-aligned threat group, tracked as UNK_MassTraction, has been exploiting vulnerabilities in Roundcube mail servers at U.S. and Canadian universities since May 2026. The campaign targets physics and…
14 articles · Updated July 7, 2026 -
LongNosedGoblin and UAT-8302: New China-Aligned APT Threats Targeting Governments
In 2024, ESET identified a new China-aligned APT group named LongNosedGoblin, which targets governmental entities in Southeast Asia and Japan. The group employs a custom toolset, primarily using C#/.NET applications, to…
8 articles · Updated May 5, 2026 -
AI-Driven Cyberattack Targets Thailand's Ministry of Finance
A cyberattack utilizing the Hermes AI agent targeted Thailand's Ministry of Finance between July 9 and July 13, 2026. Researchers from Hunt.io discovered exposed directories containing 585 files, including exploit code…
13 articles · Updated July 24, 2026 -
Vshell Emerges as Cobalt Strike Alternative Among Cybercriminals
Vshell, a Go-based command-and-control framework, is gaining popularity among threat actors as a cost-effective alternative to Cobalt Strike. Originally marketed within Chinese-speaking communities, Vshell has evolved…
3 articles · Updated February 27, 2026
Recent Intelligence Reports
- Threat Actor Ran Open-Source Hermes AI Agent in 'YOLO Mode' Against Thai Finance Ministry — Aiweekly.Co · July 25, 2026
- Proofpoint: UNK_MassTraction Report — www.proofpoint.com · July 14, 2026
- Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers — Infosecurity-Magazine · July 7, 2026
- Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities — Cyberscoop · July 7, 2026
- UAT — Blog.Talosintelligence · May 5, 2026
- Vshell Gains Traction Among Threat Actors as an Alternative to Cobalt Strike — Cybersecuritynews · February 27, 2026
- Vshell Gains Popularity Among Cybercriminals as Cobalt Strike Alternative — Gbhackers · February 27, 2026