Threat research
We track criminal infrastructure, attack tooling, fraud methods and digital-risk change, turning frontline observations into research that can be searched, cited and used.
Featured research
Read the evidence, findings and practical considerations behind changing external risk.
A global review of identity and document abuse, automated attack tools and services designed to bypass KYC controls.
Read the English publicationResearch library
Browse reviewed English translations and substantive briefs. Every item links directly to its corresponding Chinese source without a lead form.
A global e-commerce study covering seller and buyer account abuse, promotion fraud, payments and criminal supply chains.
Read the English publicationA 2025 landscape of verified data exposure, changing illegal-trading channels and emerging financial and messaging risks.
Read the English publicationAn annual assessment of fabricated identities and data, fraudulent intermediaries and organized credit-application fraud.
Read the English publicationAn annual assessment of malicious-resource shifts, AI-enabled automation, business fraud and brand abuse during 2025.
Read the English publicationA half-year view of changing attack resources, AI and payment abuse, and six fraud scenarios affecting digital businesses.
Read the English publicationA half-year review of data exposure, underground channel migration and the growing circulation of credit-related information.
Read the English publicationA focused investigation into merchant abuse and transaction manipulation targeting China's consumer subsidy program.
Read the English publicationAn annual view of changing attack resources, identity and cloud abuse, and seven major fraud scenarios observed in 2024.
Read the English publicationA 2024 landscape of verified data exposure, illegal trading chains and the practical requirements for verification and response.
Read the English publicationA study of the intermediaries, forged materials and vehicle-disposal practices that connect the auto-loan fraud chain.
Read the English publicationAn investigation into fabricated bank statements, document-authenticity risks and their implications across the credit lifecycle.
Read the English publicationA cross-market review of account abuse, order manipulation, logistics fraud and other risks facing global e-commerce platforms.
Read the English publicationA half-year study of fraudulent intermediaries, document manipulation and organized risk across the credit lifecycle.
Read the English publicationA half-year assessment of criminal-resource supply, end-to-end automation and six recurring business-attack scenarios.
Read the English publicationA half-year assessment of insurance-sector data exposure, the channels involved and the resulting governance priorities.
Read the English publicationA half-year analysis of data-breach incidents, the criminal groups behind them and their convergence with downstream fraud.
Read the English publicationAn investigation into professional debt-assumption schemes, combined lending and the challenge of verifying borrower intent.
Read the English publicationA complete English translation of Threat Hunter's quantitative framework for evaluating business-security attack impact, control effectiveness and authorized Blue Team assessment results.
Read the English publicationAn annual assessment of cybercrime trends, including the growing use of AI, cloud infrastructure and cross-scenario attack resources.
Read the English publicationAn annual view of verified data exposure, illegal trading channels and the response priorities that emerged in 2023.
Read the English publicationA third-quarter review of attack resources, AI-enabled identity abuse and the convergence of cybercrime and data exposure.
Read the English publicationA first-quarter assessment of data-asset exposure, with particular attention to financial-sector risk and protection priorities.
Read the English publicationA review of how cybercriminal supply chains, attack resources and defensive priorities evolved during 2022.
Read the English publicationAn analysis of 2022 data-exposure patterns, underground trading activity and the role of third-party governance.
Read the English publicationA governance-focused report on dynamic API assets, authorization, data minimization and abuse of business logic.
Read the English publicationA practical white paper on API asset management, defense in depth and security across the API lifecycle.
Read the English publicationA study of fraudulent registration, promotion abuse and automated attacks across the WeChat Mini Program ecosystem.
Read the English publicationAn annual review of cybercriminal capabilities and the intelligence, controls and operating practices used to counter them.
Read the English publicationA study of human-in-the-loop fraud operations and why intelligence-led defense is needed alongside automated controls.
Read the English publicationAn investigation into invalid video traffic, the underground services behind it and the signals platforms can use in response.
Read the English publicationAn early study of the industrialization of cybercrime tools and the shift from simple automation toward more adaptive attacks.
Read the English publicationFrom research to protection
Identify new attack patterns across multiple external risk signals
Validate material findings through analyst review and relevant scenarios
Turn research into intelligence labels, detection capabilities and response workflows
Start with the business risk
Connect the research topic to the market, workflow and risk objective that matters to your team.
