Cybersecurity articles tagged #China Linked on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/roundcube-flaw-exploited-by-china-linked-group-against-academicshttps://runtimerebel.com/blog/roundcube-flaw-exploited-by-china-linked-group-against-academicsA China-linked threat cluster is actively exploiting a Roundcube webmail vulnerability to steal credentials and deploy backdoors at U.S./Canadian universities.Wed, 08 Jul 2026 21:35:37 GMTRoundcubeAcademic SectorCredential TheftBackdoorChina LinkedEspionageUniversitieshttps://runtimerebel.com/blog/uat-7810-expands-lapdogs-orb-network-via-longleash-malwarehttps://runtimerebel.com/blog/uat-7810-expands-lapdogs-orb-network-via-longleash-malwareChina-linked actor UAT-7810 is leveraging new LONGLEASH malware to expand the LapDogs ORB network, targeting internet-facing networking devices for proxying.Wed, 08 Jul 2026 10:20:49 GMTUAT 7810LONGLEASHLapDogsORB NetworkChina Linkedhttps://runtimerebel.com/blog/china-linked-espionage-targets-redcap-servers-stealing-medical-datahttps://runtimerebel.com/blog/china-linked-espionage-targets-redcap-servers-stealing-medical-dataChina-linked threat actors breached exposed REDCap servers, deploying InfiniteRed malware to steal sensitive medical research from a North American institution.Mon, 15 Jun 2026 14:23:10 GMTChina LinkedREDCapINFINITEREDMedical SectorData BreachEspionagehttps://runtimerebel.com/blog/jdy-botnet-china-linked-campaign-targets-us-military-networkshttps://runtimerebel.com/blog/jdy-botnet-china-linked-campaign-targets-us-military-networksAnalysis of the China-linked JDY botnet's expanded targeting of U.S. military networks, its reconnaissance TTPs, and critical mitigation strategies.Wed, 10 Jun 2026 17:15:50 GMTJDY BotnetVolt TyphoonChina LinkedUS MilitaryReconnaissanceNational Securityhttps://runtimerebel.com/blog/ta4922-expands-phishing-campaigns-to-europe-and-south-africahttps://runtimerebel.com/blog/ta4922-expands-phishing-campaigns-to-europe-and-south-africaChina-linked TA4922 threat actor expands targeting to the UK, Germany, Italy, and South Africa using ValleyRAT and Atlas RAT malware in high-tempo attacks.Thu, 04 Jun 2026 13:14:44 GMTTA4922ValleyRATAtlas RATChina LinkedPhishinghttps://runtimerebel.com/blog/silver-fox-deploys-abcdoor-malware-via-tax-themed-phishinghttps://runtimerebel.com/blog/silver-fox-deploys-abcdoor-malware-via-tax-themed-phishingChina-linked threat actor Silver Fox targets Russian and Indian organizations using tax-themed lures to deliver the novel ABCDoor malware via phishing waves.Mon, 04 May 2026 12:42:24 GMTSilver FoxABCDoorPhishingIndiaRussiaChina Linkedhttps://runtimerebel.com/blog/storm-1175-china-linked-zero-day-exploits-deploy-medusa-ransomwarehttps://runtimerebel.com/blog/storm-1175-china-linked-zero-day-exploits-deploy-medusa-ransomwareChina-linked actor Storm-1175 is weaponizing zero-day and N-day vulnerabilities in perimeter assets to execute high-velocity Medusa ransomware attacks.Tue, 07 Apr 2026 08:33:07 GMTStorm 1175Medusa RansomwareChina LinkedZero-DayPerimeter Securityhttps://runtimerebel.com/blog/ta416-targets-european-govts-with-plugx-oauth-phishinghttps://runtimerebel.com/blog/ta416-targets-european-govts-with-plugx-oauth-phishingChina-linked TA416 has resumed targeting European government and diplomatic entities since mid-2025 using PlugX and OAuth-based phishing attacks.Fri, 03 Apr 2026 20:13:24 GMTTA416DarkPeonyPlugXOauth PhishingAPTEuropean GovernmentsChina Linked