Whipweave is a malware family tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
Whipweave is a malware family tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed July 29, 2026; most recent activity July 29, 2026.
Guangdong Chanming, a covert Chinese company, has been linked to the sale of a spy botnet to the People's Liberation Army (PLA) and various hacking groups. This botnet serves as an anonymous relay network, facilitating…
Whipweave is a malware family tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
The most recent intelligence report mentioning Whipweave on ThreatCluster is dated July 29, 2026.
Across ThreatCluster reporting, Whipweave most frequently co-occurs with Apt15, CSF 8th Bureau, Ke3chang, Nickel, Nylon Typhoon, among 12 tracked related entities.
The most significant recent cluster is “Guangdong Chanming Sells Botnet to PLA for Cyber Operations” (2 articles · Updated July 29, 2026). Whipweave appears across 1 threat cluster in total, listed above with sources.
Whipweave appears in 1 intelligence report mention across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.