EU Sanctions Companies in China, Iran for Cyberattacks

A batch of DarkReading reports highlights an active, multifaceted threat landscape: nation‑linked espionage (China‑nexus, SideWinder, Iran‑linked actors, Sednit) and criminal ransomware/ extortion groups (Warlock, INC) continue to target governments, telecoms, healthcare and critical infrastructure. New tooling and campaigns include the SnappyClient C2 implant targeting crypto wallets, the DarkSword iPhone exploit chain leveraging multiple zero‑days, GlassWorm malicious extensions in Open VSX, and a compromised Xygeni GitHub Action that enabled short‑lived C2. Other trends: credential theft/​w