A series of attacks targeting a Southeast Asian government has been found to be carried out by distinct threat actors affiliated with Chinese interests, according to Unit 42, the Palo Alto research arm closely studying the attacks.
Initially thought to be carried out by a single threat actor, the attacks are now said to have been carried out by three separate threat actors with activities grouped into different clusters, sometimes occurring simultaneously.
The operation was found to be nation-state cyberespionage, in which multiple critical government entities of one country were compromised. Unit 42 did not disclose the name of the Southeast Asian country targeted by the attacks.
