Stone Panda (APT 10) continues global espionage campaigns tied to China’s MSS.
🎯 Targets: healthcare, defense, academia
πŸ› οΈ Tools: Mimikatz, BloodHound, Impacket
🌍 Active in the U.S., UK, Japan, India & more
Espionage vs disruption β€” which do you see as their long-term mission?
Follow @technadu for continuous APT tracking.

#StonePanda #APT10 #CyberEspionage #ChinaAPT #ThreatActor #Cyble

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains

The Silk Typhoon hacking group, linked to China and previously behind Microsoft Exchange zero-day attacks, is now targeting IT supply chains, abusing stolen API keys, remote management tools, and cloud applications to infiltrate corporate networks.

The group is exploiting stolen API keys and credentials from IT service providers, launching zero-day attacks on Ivanti VPN, Palo Alto Networks, and Citrix NetScaler, and shifting from on-prem environments to cloud applications like Microsoft 365, OneDrive, and SharePoint to exfiltrate data.

Organizations must strengthen API security, enforce least privilege access, and monitor cloud environments to mitigate these growing supply chain threats.

Read more: https://thehackernews.com/2025/03/china-linked-silk-typhoon-expands-cyber.html

#Cybersecurity #SupplyChainSecurity #CloudSecurity #ThreatIntelligence #ChinaAPT #Infosec #databreach #DFIR #APIsecurity

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

Silk Typhoon exploits zero-day vulnerabilities, stolen API keys, and cloud services to infiltrate IT supply chains and government networks worldwide.

The Hacker News

Heads up: DO NOT install or use #Timu. That shit sends all your datas to servers in mainland China. Want proof? Quick Google search will show you. Plus, their vendors are #stealing #copyrighted material and infringing #trademarks from legitimate #Amazon SMB sellers.

#cybersecurity #donothackyourself #china #chinaAPT #ShittyShoppingApp #BuyAmerican

Data log thefts explode as infostealers gain popularity with cybercriminals

The malware is becoming cheaper and easier for relatively inexperienced cybercriminals to use, and the popularity of working from home and bring your own device (BYOD) policies have led to a surge in opportunities for corporate assets to be infected by personal devices.

SC Media