A large scale cyber campaign against US defense contractors has been carried out by China.

A Chinese cyberespionage group known as RedNovember targeted U.S. defense contractors and global organizations across multiple sectors. They exploited vulnerabilities in edge devices and used tools like Pantegana and Cobalt Strike for access and control. The group conducted reconnaissance and maintained long-term access to sensitive networks, including diplomatic and aerospace entities. Their campaigns focused on exploiting newly disclosed vulnerabilities for intelligence gathering.

Read more:

https://www.securityweek.com/chinese-cyberspies-hacked-us-defense-contractors/