Earth Estries Hunts NGOs, Smishing Raccoons in Your Servers, and AI Turns Cyber Defense into Chess

This is your Digital Frontline: Daily China Cyber Intel podcast. Listeners, Ting here—your guide, firewall, and two-factor authentication when it comes to Chinese cyber intel, with a side of digital wit. So let’s skip the polite handshake and jack you straight into today’s digital frontline—because while you were doomscrolling last night, the cyber tigers from Beijing were already prowling. Let’s start with the big headline: Earth Estries, that persistent, distinctly Chinese state-aligned APT, has ramped up attacks in the last 24 hours targeting US-based research labs and energy control centers. Brandefense details how Earth Estries continues to exploit publicly exposed server vulnerabilities and craft spear-phishing lures slick enough to tempt even your most paranoid sysadmin. They’re not just hunting for government files anymore—research institutions and NGOs are squarely in their crosshairs, a clear sign Beijing wants the latest in defensive R&D and tech blueprints before you’ve printed the lunch menu. For the non-pros, these folks use living-off-the-land tactics—think PowerShell, scheduled tasks, sneaky VPN compromise, and their network traffic is harder to spot than my cousin’s TikTok side hustle. Now, an urgent warning from Security Affairs: There’s a smishing campaign, attributed to China-linked actors, spreading across nearly 200,000 domains. It’s targeting US enterprises by impersonating banks, streaming services, and even health care portals. Clicking those links is like letting a raccoon into your server room. Don’t. Meanwhile, in the classic ransomware circus, Incransom has just hit Industrias Auge in the US—yes, another manufacturing firm. They’re threatening to dump contracts, employee records, and blueprints unless Bitcoin rains from the sky. The Everest group is still boasting about popping Dublin Airport, but if you think these noisy actors don’t recycle attack code with their Chinese friends, think again. It’s a threat landscape more tangled than your VPN logs. Here’s some good news, depending on your optimism level. Jen Easterly, former CISA head, tells a San Diego crowd that AI might finally turn cyber defense from whack-a-mole into chess—if we fix our wobbly software supply chain. But she also warns: AI is making the bad guys stealthier, too. Think AI-generated phishing that knows your dog’s name, exploits you patched last month, or weaponized credential dumps. So—what do the pros advise right now? Patch internet-facing servers fast. Train your people to spot phishing. Scrutinize every scheduled task and strip out all unauthorized VPN credentials. Monitor outbound DNS and HTTP/S traffic for oddball tunnels—if your coffee machine is calling Guangzhou, you’ve got a problem. Ensure your backups are untouched and encrypted; immutable backups are the new black. Phishing simulations and MFA? Mandatory. Consider threat intelligence feeds your weather radar—integrate IOCs, punish the false positives, and get those incident resp This content was created in partnership and with the help of Artificial Intelligence AI.