CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

knaithe: Chinese-Speaking Threat Actor

July 31, 2026

knaithe is the alias of a Chinese-speaking threat actor tracked by Unit 42. The operator used DeepSeek via Hermes Agent to launch autonomous attacks against over 460 targets. Public material suggests a possible location in Zhuhai, China, but this is not independently verified.