Geopolitics Alpha

China-nexus actor steals thousands of documents in monthslong exploitation campaign

Published . Updated .

Researchers suspect the hacker employed LLMs to develop custom tools.

Directly affected

  • No company is named in this report.

Indirectly affected

  • FXI ISHARES CHINA LARGE-CAP ETF

    GA selected FXI as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • KWEB KRANESHARES CSI CHINA INTERNET ETF

    GA selected KWEB as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • YANG DIREXION DAILY FTSE CHINA BEAR 3X ETF

    GA selected YANG as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • MCHI ISHARES MSCI CHINA ETF

    GA selected MCHI as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • STXE EA SER TR STRIVE EMERGING MARKETS EX-CHINA ETF

    GA selected STXE as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • TCHI ISHARES MSCI CHINA MULTISECTOR TECH ETF

    GA selected TCHI as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

Price reaction, T-5 to T+3

TickerT-5T-3T-1T0T+1T+2T+3
FXI———————
KWEB———————
YANG———————
MCHI———————
STXE———————
TCHI———————

Researchers suspect the hacker employed LLMs to develop custom tools.

Source: Cybersecurity Dive

Price since this story was published: Ishares China Large-Cap Etf (FXI)

Since the first closing price after “China-nexus actor steals thousands of documents in monthslong exploitation campaign,” Ishares China Large-Cap Etf (FXI) is -4.17%. The S&P 500 fund (SPY) is -0.88% over the same days, a -3.29% difference versus the market.

FXI
SPY

Who gains and who loses around Ishares China Large-Cap Etf (FXI)

Companies carried with this story

  • FXI Ishares China Large-Cap Etf

    In “China-nexus actor steals thousands of documents in monthslong exploitation campaign,” Ishares China Large-Cap Etf (FXI) is linked, with no stored direction, medium confidence. Reason on file: GA selected FXI as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • KWEB Kraneshares Csi China Internet Etf

    In “China-nexus actor steals thousands of documents in monthslong exploitation campaign,” Kraneshares Csi China Internet Etf (KWEB) is linked, with no stored direction, medium confidence. Reason on file: GA selected KWEB as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • YANG Direxion Daily Ftse China Bear 3X Etf

    For “China-nexus actor steals thousands of documents in monthslong exploitation campaign,” Direxion Daily Ftse China Bear 3X Etf (YANG) is linked, with no stored direction, medium confidence. Reason on file: GA selected YANG as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • MCHI Ishares Msci China Etf

    In “China-nexus actor steals thousands of documents in monthslong exploitation campaign,” Ishares Msci China Etf (MCHI) is linked, with no stored direction, medium confidence. Reason on file: GA selected MCHI as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • STXE Ea Ser Tr Strive Emerging Markets Ex-China Etf

    Ea Ser Tr Strive Emerging Markets Ex-China Etf (STXE) is linked, with no stored direction, medium confidence in the 21 Sep 2026 story “China-nexus actor steals thousands of documents in monthslong exploitation campaign.” Reason on file: GA selected STXE as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • TCHI Ishares Msci China Multisector Tech Etf

    In “China-nexus actor steals thousands of documents in monthslong exploitation campaign,” Ishares Msci China Multisector Tech Etf (TCHI) is linked, with no stored direction, medium confidence. Reason on file: GA selected TCHI as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

Ishares China Large-Cap Etf (FXI)

“China-nexus actor steals thousands of documents in monthslong exploitation campaign” (21 Sep 2026) reaches Ishares China Large-Cap Etf (FXI) through this story.

Ishares China Large-Cap Etf (FXI) is on the page because GA selected FXI as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

Also listed, Kraneshares Csi China Internet Etf (KWEB): GA selected KWEB as a RELATED security because its canonical security name directly matches this event's themes: china. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

The price range for Ishares China Large-Cap Etf (FXI), and the dates in the story

FXI traded between 33.08 and 35.28 across 20 sessions. The latest close on file is 33.55. KWEB traded between 23.79 and 25.62 across 20 sessions. The latest close on file is 24.27. YANG traded between 28.71 and 34.71 across 20 sessions. The latest close on file is 33.31.

A simple score for Ishares China Large-Cap Etf (FXI)

46 out of 100

“China-nexus actor steals thousands of documents in monthslong exploitation campaign” scores 46 out of 100. The score uses 1 sources, and 6 linked companies.