Threat actorChinaTracked since 2026-02

Chinese cybercriminal groups

Also known as:Ghost Tap operatorsNFCGate fraud networks

As of 2026-05-30, Chinese cybercriminal groups is a China-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as Ghost Tap operators, NFCGate fraud networks.

Tracked threats: 11 high
First seen: 2026-022026-02-12
Last seen: 2026-022026-02-12
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: ChinaNation or origin

Nation: China · 1 tracked threat(s) · Categories: MALWARE

Activity timeline

Chinese cybercriminal groups appears in 1 tracked threat between 2026-02-12 and 2026-02-12.

Tracked threats

Ghost Tapped: Chinese Tap-to-Pay Android Malware — NFC Relay Fraud at ScaleHIGH2026-02-12