CERT24China-Linked Hackers Deploy New TencShell Malware Against ManufacturerLoading data…
CERT24Threat Observatory
Period

China-Linked Hackers Deploy New TencShell Malware Against Manufacturer

Cato Networks’ Cyber Threats Research Lab identified the undocumented TencShell malware after an intrusion attempt against the Indian branch of an unnamed global manufacturing customer in April 2026. Cato CTRL blocked the attempt. Researchers suspect the operation was conducted by an actor based in China or linked to Chinese-backed groups, but stated that the available evidence alone is insufficient for attribution.

← Back to intelligence

China-Linked Hackers Deploy New TencShell Malware Against Manufacturer

Cato Networks’ Cyber Threats Research Lab identified the undocumented TencShell malware after an intrusion attempt against the Indian branch of an unnamed global manufacturing customer in April 2026. Cato CTRL blocked the attempt. Researchers suspect the operation was conducted by an actor based in China or linked to Chinese-backed groups, but stated that the available evidence alone is insufficient for attribution.