Researchers Link Chinese ‘Ghost’ Contractor Guangdong Chanming to RedRelay/ORBWEAVER Proxy Network https://cybersecuritynews.com/ghost-chinese-company-built-the-network-hiding-pla-cyberattacks/ Intrusion Truth researchers identified the obscure Chinese firm Guangdong Chanming as a key developer and supplier of the RedRelay (also tracked as ORBWEAVER) multi-hop proxy/ORB network used by roughly a dozen China-nexus APT groups, including clusters tracked as APT15, Ke3chang, Vixen Panda, Nylon Typhoon and others. Corporate filings, patents for anonymizing and anti-traceability systems, and PLA procurement records linking the company to an “Anonymous Network System” supplied to a Haidian District military unit point to support for PLA Cyberspace Force elements (including associations with Unit 61046 / 8th Bureau). The network is assessed as infrastructure-as-a-service that obscures operator origin and raises the cost of attribution and IOC-based blocking.