Cybersecurity articles tagged #China on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/flying-eagle-mobile-rat-builder-china-s-infostealer-as-a-servicehttps://runtimerebel.com/blog/flying-eagle-mobile-rat-builder-china-s-infostealer-as-a-serviceAnalysis of the 'Flying Eagle' mobile RAT builder, a sophisticated malware-as-a-service platform from China, used by threat groups to deploy infostealers targeting…Thu, 30 Jul 2026 02:32:07 GMTFlying EagleMobile RATAndroid MalwareInfostealerMalware as a ServiceFinancial FraudChinahttps://runtimerebel.com/blog/us-humanoid-robot-ban-mitigating-chinese-supply-chain-riskshttps://runtimerebel.com/blog/us-humanoid-robot-ban-mitigating-chinese-supply-chain-risksThe U.S. ban on foreign-made humanoid robots highlights growing concerns over data exfiltration and national security risks linked to Chinese manufacturing.Wed, 29 Jul 2026 14:14:03 GMTChinaSupply ChainNational SecurityRoboticsEspionagehttps://runtimerebel.com/blog/china-military-bans-top-cybersecurity-firms-for-procurement-violationshttps://runtimerebel.com/blog/china-military-bans-top-cybersecurity-firms-for-procurement-violationsMajor Chinese firms like Qi-An-Xin and Sangfor face PLA procurement bans due to integrity violations, impacting China’s domestic cybersecurity landscape.Thu, 16 Jul 2026 10:14:07 GMTChinaPLAQi an XinSangforSupply Chain RiskMilitary Procurementhttps://runtimerebel.com/blog/parallel-apt-cyber-espionage-targets-balochistan-policehttps://runtimerebel.com/blog/parallel-apt-cyber-espionage-targets-balochistan-policeAnalysis of parallel cyber espionage campaigns by China and India-linked APTs against Pakistan's Balochistan Police, detailed by SentinelOne.Fri, 10 Jul 2026 14:32:36 GMTChinaIndiaPakistanBalochistan PoliceAPTCyber EspionageSentinelOneNation Statehttps://runtimerebel.com/blog/chinese-llms-reshape-cyber-defense-attacker-advantagehttps://runtimerebel.com/blog/chinese-llms-reshape-cyber-defense-attacker-advantageChinese Large Language Models (LLMs) are poised to shift the cyber defense balance, potentially giving attackers an advantage. Understand the implications.Fri, 03 Jul 2026 14:12:28 GMTLarge Language ModelsAICyber DefenseThreat IntelligenceChinahttps://runtimerebel.com/blog/chinese-espionage-google-workspace-rule-abuse-in-research-sectorshttps://runtimerebel.com/blog/chinese-espionage-google-workspace-rule-abuse-in-research-sectorsChina-linked threat actors exploited REDCap server backdoors and manipulated Google Workspace mail rules to exfiltrate North American research data.Tue, 16 Jun 2026 01:12:06 GMTREDCapGoogle WorkspaceCyber EspionageChinaData Exfiltrationhttps://runtimerebel.com/blog/unc6508-chinese-cyberespionage-targets-north-american-researchhttps://runtimerebel.com/blog/unc6508-chinese-cyberespionage-targets-north-american-researchGoogle's Threat Intelligence Group tracks UNC6508, a Chinese cyberespionage group targeting North American medical, military, and AI research sectors.Mon, 15 Jun 2026 14:23:41 GMTUNC6508Cyber EspionageChinaAPTNorth AmericaMedical ResearchMilitaryAI Researchhttps://runtimerebel.com/blog/chinese-smishing-network-outsider-leverages-gemini-ai-for-phishinghttps://runtimerebel.com/blog/chinese-smishing-network-outsider-leverages-gemini-ai-for-phishingGoogle sues a Chinese smishing network operating 'Outsider' PhaaS, accused of using Gemini AI to craft sophisticated phishing messages targeting Americans.Fri, 12 Jun 2026 20:51:49 GMTSmishingPhishing as a ServicePhaaSOutsiderGemini AIGoogleCybercrime NetworkChinaSocial Engineeringhttps://runtimerebel.com/blog/jdy-botnet-expansion-china-linked-reconnaissance-on-soho-iot-deviceshttps://runtimerebel.com/blog/jdy-botnet-expansion-china-linked-reconnaissance-on-soho-iot-devicesChina-linked JDY botnet now controls 1,500+ SOHO/IoT devices, actively expanding cyber reconnaissance for state-sponsored operations.Wed, 10 Jun 2026 17:13:48 GMTJDYBotnetChinaSOHOIoTCyber ReconnaissanceState SponsoredThreat Intelligencehttps://runtimerebel.com/blog/five-eyes-warning-chinese-intelligence-job-recruitment-tacticshttps://runtimerebel.com/blog/five-eyes-warning-chinese-intelligence-job-recruitment-tacticsFive Eyes agencies issue an advisory on Chinese intelligence officers using fake job offers on professional sites to recruit personnel with security clearances.Fri, 05 Jun 2026 09:18:00 GMTFive EyesChinaSocial EngineeringInsider ThreatRecruitment Fraudhttps://runtimerebel.com/blog/ta4922-expands-global-cybercrime-analysis-of-diverse-ttpshttps://runtimerebel.com/blog/ta4922-expands-global-cybercrime-analysis-of-diverse-ttpsRuntime Rebel analyzes TA4922's expanding global cybercrime operations, detailing diverse TTPs and providing actionable mitigation strategies for security professionals.Fri, 05 Jun 2026 05:37:51 GMTTA4922CybercrimeChinaPhishingMalware Distributionhttps://runtimerebel.com/blog/china-s-dual-method-cyberattack-targets-czech-taiwan-orgs-with-azureveilhttps://runtimerebel.com/blog/china-s-dual-method-cyberattack-targets-czech-taiwan-orgs-with-azureveilNation-state actors linked to China employ dual-method spear-phishing with Azureveil malware to target Czech and Taiwan organizations for data theft.Tue, 02 Jun 2026 21:12:29 GMTChinaAzureveilSpear PhishingData TheftCzech RepublicTaiwanNation Statehttps://runtimerebel.com/blog/china-linked-uat-8302-targets-governments-with-custom-apt-malwarehttps://runtimerebel.com/blog/china-linked-uat-8302-targets-governments-with-custom-apt-malwareUAT-8302, a China-linked threat group, targets government entities in South America and SE Europe using custom malware and shared APT toolsets.Tue, 05 May 2026 16:39:00 GMTUAT 8302ChinaAPTCisco TalosCyber Espionagehttps://runtimerebel.com/blog/us-strategic-pivot-cyber-risk-and-geopolitical-shift-analysishttps://runtimerebel.com/blog/us-strategic-pivot-cyber-risk-and-geopolitical-shift-analysisAnalysis of the US strategic shift toward force-driven security and its implications for cyber threats from China, Russia, Iran, and criminal groups.Thu, 30 Apr 2026 16:41:48 GMTGeopoliticsChinaRussiaIranTransnational Organized CrimeWestern Hemispherehttps://runtimerebel.com/blog/alleged-silk-typhoon-hacker-extradited-cyberespionage-threathttps://runtimerebel.com/blog/alleged-silk-typhoon-hacker-extradited-cyberespionage-threatAn alleged Silk Typhoon hacker, associated with Chinese intelligence, has been extradited to the US, highlighting persistent nation-state cyberespionage threats.Mon, 27 Apr 2026 20:30:07 GMTSilk TyphoonVolt TyphoonCyber EspionageNation StateChinaExtraditionAPThttps://runtimerebel.com/blog/chinese-spear-phishing-campaign-targets-nasa-defense-softwarehttps://runtimerebel.com/blog/chinese-spear-phishing-campaign-targets-nasa-defense-softwareNASA OIG reveals a multi-year spear-phishing campaign by a Chinese national impersonating researchers to exfiltrate sensitive U.S. defense software.Fri, 24 Apr 2026 16:25:59 GMTNASAChinaSpear PhishingExport ControlDefense SoftwareOIG Reporthttps://runtimerebel.com/blog/chinese-state-backed-actors-industrialize-botnets-for-covert-opshttps://runtimerebel.com/blog/chinese-state-backed-actors-industrialize-botnets-for-covert-opsChinese state-backed groups are adopting industrialized botnets, utilizing compromised devices for low-cost, low-risk, and deniable cyber operations.Fri, 24 Apr 2026 00:47:01 GMTChinaState BackedBotnetAPTCyber EspionageIndustrialized Botnetshttps://runtimerebel.com/blog/uk-cyber-chief-russia-iran-china-drive-top-cyber-threatshttps://runtimerebel.com/blog/uk-cyber-chief-russia-iran-china-drive-top-cyber-threatsNCSC warns British businesses of escalating cyber threats from state-sponsored groups in Russia, Iran, and China, urging preparedness for potential large-scale attacks.Wed, 22 Apr 2026 20:26:36 GMTUKNCSCRussiaIranChinaNation StateCyber WarfareCritical Infrastructurehttps://runtimerebel.com/blog/malicious-crypto-wallets-infiltrate-china-s-apple-app-storehttps://runtimerebel.com/blog/malicious-crypto-wallets-infiltrate-china-s-apple-app-store26 fake cryptocurrency wallet apps infiltrated China's Apple App Store, impersonating popular brands to steal seed phrases and drain user funds.Tue, 21 Apr 2026 00:45:03 GMTCryptocurrencyMalwareiOSApple App StoreWalletSeed Phrase TheftChinaSupply Chain Attackhttps://runtimerebel.com/blog/fbi-warning-assessing-data-security-risks-of-chinese-mobile-applicationshttps://runtimerebel.com/blog/fbi-warning-assessing-data-security-risks-of-chinese-mobile-applicationsThe FBI warns against data security risks associated with foreign-developed mobile applications, particularly Chinese apps, due to potential data exfiltration.Wed, 01 Apr 2026 12:27:27 GMTMobile SecurityData PrivacyFBI WarningData ExfiltrationChinaSupply Chain Riskhttps://runtimerebel.com/blog/china-linked-apt-clusters-target-se-asian-government-via-hiupanhttps://runtimerebel.com/blog/china-linked-apt-clusters-target-se-asian-government-via-hiupanThree China-linked threat clusters targeted a Southeast Asian government in 2025 using HIUPAN, PUBLOAD, and EggStremeFuel malware in a complex espionage operation.Mon, 30 Mar 2026 08:39:27 GMTChinaHiupanPubloadEggstremefuelSoutheast AsiaAPTMalwarehttps://runtimerebel.com/blog/red-menshen-apt-deploys-upgraded-bpfdoor-backdoor-against-telcoshttps://runtimerebel.com/blog/red-menshen-apt-deploys-upgraded-bpfdoor-backdoor-against-telcosChinese APT Red Menshen utilizes an upgraded BPFdoor backdoor to target global telecommunication companies, bypassing traditional defenses.Fri, 27 Mar 2026 20:16:14 GMTRed MenshenBPFdoorAPTTelecommunicationsChinaBackdoorEspionagehttps://runtimerebel.com/blog/eu-sanctions-china-and-iran-entities-over-apt31-cyber-operationshttps://runtimerebel.com/blog/eu-sanctions-china-and-iran-entities-over-apt31-cyber-operationsThe European Union imposes sanctions on Chinese and Iranian entities linked to APT31 and state-sponsored cyber espionage targeting democratic institutions.Thu, 19 Mar 2026 08:18:51 GMTAPT31Wuhan XiaoruizhiSanctionsChinaIranCyber Diplomacyhttps://runtimerebel.com/blog/uat-9244-targets-south-american-telcos-with-custom-malware-toolkithttps://runtimerebel.com/blog/uat-9244-targets-south-american-telcos-with-custom-malware-toolkitChinese state-sponsored actor UAT-9244 targets telecommunications in South America using FaceFish and TinyShell malware to exploit network edge devices.Fri, 06 Mar 2026 00:38:51 GMTUAT 9244FaceFishTinyShellTelecommunicationsSouth AmericaChinahttps://runtimerebel.com/blog/google-forecasts-90-enterprise-zero-day-exploits-in-2025https://runtimerebel.com/blog/google-forecasts-90-enterprise-zero-day-exploits-in-2025Google predicts half of the 90 exploited zero-day vulnerabilities in 2025 will target enterprises. Understand attribution and proactive defense strategies.Thu, 05 Mar 2026 16:26:00 GMTZero-DayEnterprise SecurityGoogle TAGExploitation TrendsSpywareChinahttps://runtimerebel.com/blog/meta-files-lawsuits-against-global-celeb-bait-scam-networkshttps://runtimerebel.com/blog/meta-files-lawsuits-against-global-celeb-bait-scam-networksMeta takes legal action against advertisers in Brazil, China, and Vietnam, disabling accounts and domains used in large-scale celebrity-bait fraud schemes.Fri, 27 Feb 2026 08:17:57 GMTMetaSocial EngineeringPhishingCeleb BaitBrazilChinaVietnamAdvertising Fraudhttps://runtimerebel.com/blog/chinese-police-use-chatgpt-in-influence-operations-against-japanhttps://runtimerebel.com/blog/chinese-police-use-chatgpt-in-influence-operations-against-japanChinese police reportedly used ChatGPT for politically motivated influence operations to smear Japan's PM Takaichi, highlighting AI's role in disinformation campaigns.Thu, 26 Feb 2026 00:33:49 GMTChatGPTInfluence OperationsDisinformationNation StateChinaJapanAICyber Espionagehttps://runtimerebel.com/blog/google-disrupts-chinese-espionage-actor-unc2814-targeting-telecomshttps://runtimerebel.com/blog/google-disrupts-chinese-espionage-actor-unc2814-targeting-telecomsGoogle and Mandiant disrupt UNC2814, a Chinese state-sponsored actor active since 2017, targeting 42 countries across telecom and government sectors.Wed, 25 Feb 2026 16:34:10 GMTUNC2814ChinaCyber EspionageGoogle TAGMandiantTelecommunicationsState Sponsored