Dossier
Chinese threat actor
Coverage of Chinese threat actor in the Nexus archive.
- Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
A Chinese threat actor is using a leaked DarkSword exploit kit to deploy GHOSTBLADE on Apple iOS devices. Censys identified over 100 web properties operated by the actor, primarily fake Amazon Web Services sign-in pages hosting the exploit toolkit.