Tag: Chinese threat actor

Attack Groups

SHELLSTORM is a large-scale operation that exploited 27 CVEs in WordPress plugins to deploy web shells on over 1.4 million domains. The…

Chinese threat actor SHELLSTORM SNOWLIGHT VShell

July 13, 2026

Attack Groups

DarkSpectre is a Chinese threat actor linked by Koi Security to the StegoAd campaign. It has been active since at least 2021,…

browser extension malware Chinese threat actor DarkSpectre steganography

June 29, 2026