negativeSYS.SOURCE: The Hacker News• 2026-07-23T17:50:23+05:30

China-Nexus JadeProx Leverages TriBack Loader in Targeted Cyberattacks on Government and Healthcare Sectors

#malware #vulnerability #government-security #healthcare-security #threat-intelligence

China-Nexus JadeProx employs a novel TriBack Loader malware to conduct targeted cyberattacks on government, healthcare, and education institutions across Asia and Latin America. The attack chain utilizes DLL sideloading techniques with signed executables, exploits known vulnerabilities (including CVE-2021-32305 and others with CVSS 9.8 scores), and includes phishing campaigns impersonating Claude and other services.

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader.

Group-IB found the server in mid-April 2026 in Alibaba Cloud's Singapore region; it was offline by the time the report

Read original article

*** END OF TRANSMISSION ***

> AEGISAI LEVERAGES AI TO COMBAT SPEAR PHISHING, SECURES $36M IN FUNDING > RUSSIAN ESPIONAGE GROUP EXPLOITS ZIMBRA ZERO-DAY TO STEAL EMAIL AND 2FA CREDENTIALS > CONTEXTUAL EVALUATION AND AGENTIC GUARDRAILS IN AI SYSTEMS > EVALUATING ATPROTO'S POTENTIAL FOR DECENTRALIZED REVIEW APPLICATIONS > SOLID-STATE ATOMIC CHANNEL FOR EFFICIENT RARE EARTH ELEMENT SEPARATION > GEEKBENCH 7 RELEASE AND COMMUNITY DISCUSSION > US GOVERNMENT WARNS OF IRANIAN STATE-BACKED CYBERATTACKS ON CRITICAL INFRASTRUCTURE > RUNWAY INTRODUCES AI MODEL ROUTER TO STREAMLINE GENERATIVE MEDIA INTEGRATION > CLAUDE-THERMOS: A TOOL TO MAINTAIN CLAUDE SESSIONS > OPENAI EXPANDS CHATGPT HEALTH ACCESS TO ALL U.S. USERS, ENHANCES INTEGRATION WITH HEALTH PLATFORMS> AEGISAI LEVERAGES AI TO COMBAT SPEAR PHISHING, SECURES $36M IN FUNDING > RUSSIAN ESPIONAGE GROUP EXPLOITS ZIMBRA ZERO-DAY TO STEAL EMAIL AND 2FA CREDENTIALS > CONTEXTUAL EVALUATION AND AGENTIC GUARDRAILS IN AI SYSTEMS > EVALUATING ATPROTO'S POTENTIAL FOR DECENTRALIZED REVIEW APPLICATIONS > SOLID-STATE ATOMIC CHANNEL FOR EFFICIENT RARE EARTH ELEMENT SEPARATION > GEEKBENCH 7 RELEASE AND COMMUNITY DISCUSSION > US GOVERNMENT WARNS OF IRANIAN STATE-BACKED CYBERATTACKS ON CRITICAL INFRASTRUCTURE > RUNWAY INTRODUCES AI MODEL ROUTER TO STREAMLINE GENERATIVE MEDIA INTEGRATION > CLAUDE-THERMOS: A TOOL TO MAINTAIN CLAUDE SESSIONS > OPENAI EXPANDS CHATGPT HEALTH ACCESS TO ALL U.S. USERS, ENHANCES INTEGRATION WITH HEALTH PLATFORMS