UNC5174’s evolution in China’s ongoing cyber warfare: From SNOWLIGHT to VShell

Author(s): Alessandra Rizzo
Organization: sysdig

Open article directly Open article on Archive.org

2026-07-20 ⋅ sysdig ⋅ Michael Clark
JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models
JadePuffer

2026-07-01 ⋅ sysdig ⋅ Michael Clark
JADEPUFFER: Agentic ransomware for automated database extortion
JadePuffer

2026-01-16 ⋅ sysdig ⋅ Sysdig Threat Research Team
VoidLink threat analysis: Sysdig discovers C2-compiled kernel rootkits
VoidLink

Propose Change UNC5174’s evolution in China’s ongoing cyber warfare: From SNOWLIGHT to VShell