ASEAN Entities in the Spotlight: Chinese APT Group Targeting
Summary: Unit 42 researchers identified two Chinese APT groups, including Stately Taurus (operating since at least 2012), conducting cyberespionage against ASEAN-affiliated entities and member countries over the past 90 days. During the ASEAN-Australia Special Summit of March 4-6, 2024, the group created two malware packages on March 4-5 - a ZIP archive seen in the Philippines, Japan and Singapore, and a screensaver file seen in Myanmar - abusing signed software from QFX Software and Electronic Arts to sideload malicious DLLs.
Why it matters: ASEAN-affiliated entities are targeted because they handle sensitive information on diplomatic relations and economic decisions in the region, and Unit 42 observed network traffic between one such entity and the second Chinese APT group's malicious infrastructure, indicating its environment was already compromised.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026