Threats · 240 days ago

Chinese-linked Silver Dragon targets governments with Cobalt Strike

Silver Dragon, a Chinese-aligned actor, has been intruding on government targets in Southeast Asia and Europe. Infection chains include AppDomain hijack, service DLL deployment, and phishing.

Timeline

• Mar 4 Reported by The Hacker News
• Mar 3 Reported by Check Point Research

Sources

3 sources covering this story

• The Hacker News Mar 4

  APT41-Linked Silver Dragon Targets Governments Using Cobalt Strike and Google Drive C2

  Researchers link Silver Dragon APT to APT41 after attacks on government entities using Cobalt Strike, DNS tunneling, and Google Drive-based C2.

• Dark Reading Mar 4

  China's Silver Dragon Razes Governments in EU, SE Asia

  The emerging actor, part of the APT41 nexus, gains initial access via phishing and uses legitimate network services to obscure cyber espionage activities.

• Check Point Research Mar 3

  Silver Dragon Targets Organizations in Southeast Asia and Europe - Check Point Research

  We have designated this activity cluster as Silver Dragon.

Entities

• Silver Dragon

Part of the PlainSec briefing for 2026-03-04

Editions

• Briefing for 2026-03-04

Related stories

• Iran-linked cyberattacks surge after US‑Israel Operation Epic Fury
• US‑Israeli strikes coincide with major cyber disruption in Iran
• India-linked APT Sloppy Lemming escalates espionage against South Asian targets