China-linked Espionage Tools Used in Ransomware Attacks

Author(s): Threat Hunter Team
Organization: Symantec

Open article directly Open article on Archive.org

2026-03-05 ⋅ Symantec ⋅ Threat Hunter Team
Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company
Tsundere

2026-02-24 ⋅ Symantec ⋅ Threat Hunter Team
North Korean Lazarus Group Now Working With Medusa Ransomware
ComeBacker Medusa

2026-02-05 ⋅ Symantec ⋅ Threat Hunter Team
Reynolds: Defense Evasion Capability Embedded in Ransomware Payload
Reynolds

Propose Change China-linked Espionage Tools Used in Ransomware Attacks