Chinese-speaking threat actor

Chinese-speaking threat actor exploits ZyXEL and WordPress vulnerabilities to exfiltrate government data

A Chinese-speaking threat actor has been exploiting known vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress platforms to steal sensitive data from 996 devices and over 18,500 records stored in backend databases. The campaign leverages multiple technologies to gain initial access and exfiltrate information from government targets.