Back to today’s briefing

Story perspectives

Chinese Hacker Group Targets U.S. Local Governments

5/23/2025

50 12

Summary

Story summary

A Chinese-speaking hacker group, UAT-6382, has been targeting U.S. local government networks since January 2025, leveraging a patched vulnerability in Trimble Cityworks. They deployed sophisticated malware, including Cobalt Strike and VShell, while using web shells and custom tools to maintain their foothold. Cisco Talos unveiled these alarming findings today.

1 of 1

Story summary

A Chinese-speaking hacker group, UAT-6382, has been targeting U.S. local government networks since January 2025, leveraging a patched vulnerability in Trimble Cityworks. They deployed sophisticated malware, including Cobalt Strike and VShell, while using web shells and custom tools to maintain their foothold. Cisco Talos unveiled these alarming findings today.