cybersecuritynews.com/ghost-chi…
Intrusion Truth researchers identified the obscure Chinese firm Guangdong Chanming as a key developer and supplier of the RedRelay (also tracked as ORBWEAVER) multi-hop proxy/ORB network used by roughly a dozen China-nexus APT groups, including clusters tracked as APT15, Ke3chang, Vixen Panda, Nylon Typhoon and others.
Corporate filings, patents for anonymizing and anti-traceability systems, and PLA procurement records linking the company to an “Anonymous Network System” supplied to a Haidian District military unit point to support for PLA Cyberspace Force elements (including associations with Unit 61046 / 8th Bureau). The network is assessed as infrastructure-as-a-service that obscures operator origin and raises the cost of attribution and IOC-based blocking.
