Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory
Back to threat actors
1 malware family

china_linked_threat_actors

Also known aschina_linked_threat_actors

China-linked threat actors are referenced as having weaponized the React2Shell vulnerability within hours of its public disclosure. This demonstrates a high level of operational agility and capability in exploiting newly disclosed vulnerabilities for cyber operations. The specific targets or sectors affected by these attacks are not detailed in the provided content. No additional information about specific sub-groups, aliases, or broader targeting patterns is included in the context. The attribution to China is explicit, but further details on tactics, techniques, or procedures beyond rapid exploitation of zero-days are not available in the provided summary.

Share:
Are they targeting you?

Know when an actor pivots toward your sector

Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: sector and geo overlap with your footprint, the IOCs they’re burning right now, detection coverage, and what to do next.
Target overlap

Match sector + geo + tech-stack targeting against your real footprint.

Tradecraft mapping

Every observed MITRE ATT&CK technique, grouped by tactic.

Malware arsenal1

Families this actor is known to deploy, with IOCs and behavior.

Exploited CVEs

CVEs this actor has used in known campaigns.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Observables

Domains, IPs, and hashes tied to this actor, refreshed continuously.