OTX Threat: JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake

In mid-April 2026, an exposed directory on an Alibaba Cloud server revealed a comprehensive China-nexus operation targeting government, healthcare, and education sectors across Southeast Asia and Latin America. The investigation uncovered simultaneous intrusions against Vietnamese hospitals, the Malaysian Ministry of Foreign Affairs, Hong Kong educational institutions, and targets in Honduras and CVEs: CVE-2018-11511, CVE-2021-24139, CVE-2021-31755, CVE-2021-32305 Sectors: Healthcare, Governmen