NCHP was a Chinese red-hacker group active during the formative period of China’s hacker community in the late 1990s and 2000s. Like other contemporary patriotic hacking groups, it appears to have been organized around a small core team rather than a large, operationally capable mass membership. Available historical evidence indicates that NCHP listed 10 core members in 2005, with no reliable public data on a broader registered-user base. NCHP fits the broader pattern of early Chinese hacker collectives in which a limited number of technically proficient members conducted substantive operations while the wider surrounding community, where present, often served social, organizational, or support functions. These groups commonly blended technical activity with community-building and administrative roles, and their real capability depended on a narrow pool of skilled operators rather than headline membership figures. High-confidence public information about NCHP’s specific operations, victimology, malware usage, or command relationships is limited. It can be characterized as part of China’s early patriotic hacker ecosystem, but detailed attribution of particular campaigns, targets, or advanced tradecraft to NCHP is not currently available from the supplied facts.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Attributed origin per open-source reporting.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.