Tag: whirlcoil

1 Attack Reports | 0 Vulnerabilities

Attack reports

Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels

Throughout July and August 2025, TA415, a Chinese state-sponsored threat actor, conducted spearphishing campaigns targeting U.S. government, think tank, and academic organizations focused on U.S.-China relations. The group impersonated high-profile individuals and organizations to deliver an infect…
spearphishing
voldemort
lnk files
python loader
2025-09-17
economic espionage
u.s.-china relations
vs code remote tunnels
whirlcoil
github authentication
Published: September 17, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports