Infamous Hacker Heading Chinese Antivirus Firm?
Summary: Krebs on Security reported in November 2012 that Anvisoft, a Chinese antivirus startup, gave inconsistent answers about its leadership and location, claiming to be in Canada while WHOIS and trademark records pointed to Chengdu, China. Historical WHOIS records tied Anvisoft's domains to the email tandailin@163.com, the same address used by Tan Dailin, whom a 2007 iDefense report named as Wicked Rose, leader of the NCPH hacking team implicated in Office zero-day attacks on a large U.S. DoD entity.
Bottom line: The same registrant email behind Anvisoft's domains belonged to a hacker a Verisign iDefense report tied to a four-man team that used a Microsoft Word zero-day against a large DoD entity, and Anvisoft's product had already been whitelisted by Comodo and other security products before anyone established who ran the company.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026