Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike

Wednesday, September 24, 2025 4:36 PM | The Hacker News
A suspected cyber espionage activity cluster that was previously found targeting global government and private sector organizations spanning Africa, Asia, North America, South America, and Oceania has been assessed to be a Chinese state-sponsored threat actor. Recorded Future, which was tracking the activity under the moniker TAG-100, has now graduated it to a hacking group dubbed RedNovember.