This unnamed China-linked APT group is known for targeting civil society organizations deemed hostile.
This unnamed threat actor is a suspected Chinese nation-state group linked to the People's Republic of China. It primarily targets government entities and, more specifically, civil society organizations in China, Myanmar, Hong Kong, and Taiwan that the Chinese Communist Party considers hostile, including Tibetan, Uyghur, Hong Kong, and Taiwanese activist groups, as well as the Myanmar electoral commission. As no specific TTPs are detailed in the provided intelligence, it is assessed the group likely employs standard cyber espionage techniques, such as tailored phishing, malware deployment, and targeted reconnaissance operations against its victims. Defenders should remain highly vigilant for sophisticated spear-phishing campaigns against individuals associated with at-risk activist communities, alongside monitoring for anomalous authentication attempts and signs of data exfiltration within government-related networks.
This threat actor compromises civil society groups the Chinese Communist Party views as hostile to its interests, such as Tibetan, Uyghur, Hong Kong, and Taiwanese activist. The threat actor also targeted the Myanmar electoral commission.
The actor is primarily active in China, Myanmar, Hong Kong, and Taiwan, targeting groups considered hostile by the Chinese Communist Party.
According to the provided intelligence, it has also targeted the Myanmar electoral commission.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.