{"id":41587,"date":"2021-07-01T16:35:32","date_gmt":"2021-07-01T16:35:32","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/32423\/Chinese-Hacking-Group-Impersonates-Afghan-President-To-Infiltrate-Government-Agencies.html"},"modified":"2021-07-01T16:35:32","modified_gmt":"2021-07-01T16:35:32","slug":"chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","title":{"rendered":"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies"},"content":{"rendered":"<p>A Chinese-speaking hacking group is performing ongoing cyberattacks against the Afghan government by impersonating its president.&nbsp;<\/p>\n<p>On Thursday, Check Point Research (CPR) said that the Office of the President of Afghanistan, representing President Ashraf Ghani, is being <a href=\"https:\/\/research.checkpoint.com\/2021\/indigozebra-apt-continues-to-attack-central-asia-with-evolving-tools\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">used as a lure<\/a> in spear phishing emails designed to infiltrate government agencies in the country, of which a successful attack has led to the compromise of the Afghan National Security Council (NSC).<\/p>\n<p>It is thought that an advanced persistent threat (APT) group called IndigoZebra is responsible. The Chinese-speaking cyberattackers have targeted former Soviet Republics previously, as <a href=\"https:\/\/securelist.com\/apt-trends-report-q2-2017\/79332\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">noted by Kaspersky<\/a>.&nbsp; <\/p>\n<p>Dupe email samples seen by the cybersecurity firm pretend to be from the president&#8217;s office and ask for an urgent review of modifications to a document relating to an upcoming press conference. The researchers say that these emails are sent from the compromised email inboxes of past, high-profile victims.&nbsp; <\/p>\n<figure class=\"image image-original shortcode-image\"><span class=\"img aspect-set \"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/\" class=\"lazy\" alt=\"screenshot-2021-06-29-at-15-38-14.png\" height=\"auto\" width=\"1200\" data-original=\"https:\/\/www.zdnet.com\/a\/hub\/i\/r\/2021\/06\/29\/8f9334b6-38bc-4b2d-999c-fa226c03282f\/resize\/1200xauto\/20994f427b73dcc15495ea43544036c1\/screenshot-2021-06-29-at-15-38-14.png\"><\/span><noscript><span class=\"img aspect-set \"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/hub\/i\/r\/2021\/06\/29\/8f9334b6-38bc-4b2d-999c-fa226c03282f\/resize\/1200xauto\/20994f427b73dcc15495ea43544036c1\/screenshot-2021-06-29-at-15-38-14.png\" class alt=\"screenshot-2021-06-29-at-15-38-14.png\" height=\"auto\" width=\"1200\"><\/span><\/noscript><figcaption><span class=\"caption\"><\/span><span class=\"credit\"> CPR <\/span><\/figcaption><\/figure>\n<p>The file is a password-protected .RAR archive named NSC Press conference.rar. If a victim opens the file, they receive a Windows executable (NSC Press conference.exe), which deploys a malware dropper and the &#8220;xCaon&#8221; backdoor which maintains persistence by setting a registry key.&nbsp;<\/p>\n<p>The backdoor is able to download and upload files, run commands issued through a command-and-control (C2) server, and steal data. <\/p>\n<p>Dropbox is being abused as a form of C2 server in the latest version of this backdoor, dubbed &#8220;BoxCaon&#8221; by CPR. <\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\"> <\/section>\n<p>Every victim secured by the threat actors is assigned a unique and pre-configured folder, named after a victim&#8217;s MAC address, which contains instructions for the malware and also acts as a storage bucket for exfiltrated data.&nbsp; <\/p>\n<p>CPR says that by using the Dropbox API, this &#8220;masks their malicious activities, as no communication to abnormal websites takes place.&#8221; <\/p>\n<p>IndigoZebra will also deploy a NetBIOS scanner tool adopted by another Chinese APT, <a href=\"https:\/\/www.ncsc.gov.uk\/news\/apt10-continuing-target-uk-organisations\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">APT10<\/a>\/Stone Panda, and may maliciously execute network utility tools for reconnaissance in the quest for further targets. &nbsp; <\/p>\n<p>Malware utilized by the group also includes Meterpreter, Poison Ivy, xDown, and the xCaon backdoor. <\/p>\n<p>CPR says that the APT in question is also likely responsible for attacks dating back to 2014, in which political entities in Kyrgyzstan and Uzbekistan were targeted.&nbsp; <\/p>\n<p>&#8220;While the IndigoZebra actor was initially observed targeting former Soviet republics such as Uzbekistan and Kyrgyzstan, we have now witnessed that its campaigns do not dial down, but on the contrary &#8212; they expand to the new targets in the region, with a new toolset,&#8221; the researchers commented.&nbsp; <\/p>\n<h3> Previous and related coverage <\/h3>\n<hr>\n<p><strong>Have a tip?<\/strong> Get in touch securely via WhatsApp | Signal at +447713 025 499, or over at Keybase: charlie0 <\/p>\n<hr>\n<p> READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/32423\/Chinese-Hacking-Group-Impersonates-Afghan-President-To-Infiltrate-Government-Agencies.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[277],"tags":[9432],"class_list":["post-41587","post","type-post","status-publish","format-standard","hentry","category-cybersecurity-blogs","tag-headlinehackergovernmentmalwarechinacyberwarphishafghanistan"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-01T16:35:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/article\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies\",\"datePublished\":\"2021-07-01T16:35:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\"},\"wordCount\":452,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\",\"keywords\":[\"headline,hacker,government,malware,china,cyberwar,phish,afghanistan\"],\"articleSection\":[\"CyberSecurity Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\",\"name\":\"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\",\"datePublished\":\"2021-07-01T16:35:32+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,government,malware,china,cyberwar,phish,afghanistan\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinehackergovernmentmalwarechinacyberwarphishafghanistan\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","og_locale":"en_US","og_type":"article","og_title":"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-07-01T16:35:32+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/article\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies","datePublished":"2021-07-01T16:35:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/"},"wordCount":452,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/article\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","keywords":["headline,hacker,government,malware,china,cyberwar,phish,afghanistan"],"articleSection":["CyberSecurity Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","url":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","name":"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/article\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","datePublished":"2021-07-01T16:35:32+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/#primaryimage","url":"https:\/\/www.zdnet.com\/article\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/","contentUrl":"https:\/\/www.zdnet.com\/article\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/chinese-hacking-group-impersonates-afghan-president-to-infiltrate-government-agencies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,government,malware,china,cyberwar,phish,afghanistan","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackergovernmentmalwarechinacyberwarphishafghanistan\/"},{"@type":"ListItem","position":3,"name":"Chinese Hacking Group Impersonates Afghan President To Infiltrate Government Agencies"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/41587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=41587"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/41587\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=41587"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=41587"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=41587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}