Skip to content
Nation-state APTEspionageAdvanced sophistication

WLNXSPLINTER

WLNXSPLINTER is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense.

Origin
China
Techniques
0
Exploited CVEs
No CVE data
First seen
Apr 7, 2020
Last seen
Apr 7, 2020
Record updated

About WLNXSPLINTER.

A newly identified Chinese-nexus threat cluster tracking under the WINNTI umbrella focusing on deploying Linux backdoors and kernel-level rootkits.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.