Tag: relay network

1 Attack Reports | 0 Vulnerabilities

Attack reports

Ink Dragon's Relay Network and Stealthy Offensive Operation

Check Point Research has identified a new wave of attacks by the Chinese threat actor Ink Dragon, targeting government entities in Europe, Southeast Asia, and South America. The actor builds a victim-based relay network using a custom ShadowPad IIS Listener module, turning compromised servers into …
espionage
shadowpad
government targets
chinese threat actor
finaldraft
iis exploitation
2025-12-16
relay network
stealthy operations
Published: December 16, 2025
Downloadable IOCs: 16
Click here to see more Attack Reports