China’s new cyber arsenal revealed.

Sysdig researchers report that UNC5174, a Chinese state-sponsored threat actor, has re-emerged with a stealthy campaign employing a SNOWLIGHT malware variant and the VShell RAT to target Linux systems via malicious bash scripts, domain squatting, and in-memory/fileless payloads; the activity demonstrates high sophistication and espionage intent against research institutions, critical infrastructure, and NGOs across the West and Asia-Pacific.