BestShell: Open-Source Chinese Webshell
An open-source Chinese webshell from which the WP-SHELLSTORM main backdoor (down.php) was derived. It allows file management, command execution, reverse shells, and…
Tag: Chinese
UNC5174: Suspected Chinese State Group
A suspected Chinese state group linked by Sysdig to the SNOWLIGHT-to-VShell toolchain in April 2025. The same tools were used by WP-SHELLSTORM,…
APT31: Chinese Cyber Espionage Group
APT31, also known as Zirconium, is a Chinese state-sponsored cyber espionage group that has used Tailscale for tunneling in attacks against Russian…