AI-powered analysis exposes massive 5,000-domain Chinese malware operation

DomainTools Investigations has released critical findings detailing the expansion of a massive malware-delivery network targeting Chinese-speaking users worldwide.

The long-running cluster, active since June 2023, has swelled to approximately 5,000 domains, with researchers identifying over 1,900 new domains between May and November 2025 alone.

This latest investigation also marks a significant milestone in defensive cybersecurity, demonstrated how agentic AI systems successfully achieved a 10x improvement in analysis speed compared to traditional manual workflows.

Read more at GB Hackers