Signal

Chinese engineer's long-running spear-phishing campaign targets US military and NASA software

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-04-28 09:21 UTCUpdated 2026-04-28 16:17 UTC
rss
cveexploitsbreachesmalwarethreat_actorsadvisories
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
Chinese spear-phishing campaign targets NASA employees
SC Media · News · scworld.com · 2026-04-28 16:17 UTC
Chinese engineer stole US military and NASA software for years
Malwarebytes Threat Analysis · News · malwarebytes.com · 2026-04-28 09:21 UTC
limited source diversity in top sources
Overview

Coverage centers on: Malwarebytes Threat Analysis.

Entities
Aviation Industry Corporation of ChinaNASASong Wu
Score total
0.82
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
  • FBI has been pursuing Song Wu since 2024, emphasizing the long-term nature of the threat.
  • Recent reports reveal continued Chinese spear-phishing campaigns against NASA employees.
  • Ongoing espionage underscores the need for enhanced cybersecurity and incident response measures.
Why it matters
  • Demonstrates ongoing cyber espionage threats to US military and NASA through social engineering.
  • Highlights vulnerabilities in US government and research institutions to targeted phishing attacks.
  • Shows the role of state-affiliated actors in persistent cyber theft of sensitive software and data.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • Chinese engineer Song Wu stole US military and NASA software for years via email impersonation.
  • Chinese spear-phishing campaigns have targeted NASA employees to access sensitive data.
How sources frame it
  • Malwarebytes Threat Analysis: neutral
  • SC Media: neutral
This case illustrates the persistent use of social engineering by state-affiliated actors to steal sensitive US government and research software, emphasizing the importance of vigilance against spear-phishing threats.
All evidence
All evidence
Chinese spear-phishing campaign targets NASA employees
SC Media · scworld.com · 2026-04-28 16:17 UTC
Chinese engineer stole US military and NASA software for years
Malwarebytes Threat Analysis · malwarebytes.com · 2026-04-28 09:21 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • SC Media (1)
  • Malwarebytes Threat Analysis (1)
Top origin domains (this list)
  • scworld.com (1)
  • malwarebytes.com (1)