> TritonInfoSec News
Home / Jul 24, 2026 / Story
0
#8 The Hacker News general July 23, 2026 at 12:20 UTC

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

By [email protected] (The Hacker News)

AI Summary

Group-IB identified a China-nexus threat cluster tracked as JadeProx via an exposed Alibaba Cloud server in Singapore (discovered mid-April 2026) that was deploying a previously undocumented Windows loader called TriBack Loader against government, healthcare, and education targets across Asia and Latin America. The exposure of the Alibaba Cloud server provided rare visibility into the group's tooling and targeting patterns. Security teams in those sectors and regions should treat TriBack Loader indicators as high-priority threat intelligence.

Read full article → https://thehackernews.com/2026/07/china-nexus-jade…

Relevance score: 75.0/100

# More from July 24

  1. 1
    Russian hackers exploit Zimbra zero-click flaw for email theft BleepingComputer
  2. 2
    Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access The Hacker News
  3. 3
    Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs The Hacker News
  4. 4
    OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face Ars Technica Security
  5. 5
    Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft SecurityWeek
  6. 6
    Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge The Hacker News
  7. 7
    Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks SecurityWeek
  8. 9
    South Korea discloses data breach impacting diplomats worldwide BleepingComputer
  9. 10
    US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices SecurityWeek