Google disrupts Сhina-linked cyberespionage campaign spanning dozens of countries

Google Threat Intelligence attributed a long-running China-linked espionage campaign to UNC2814, saying the actor used a newly identified backdoor named Gridtide and abused Google Sheets for covert command-and-control to target telecommunications providers and government organizations across at least 42 countries; Google, Mandiant and partners disabled the known infrastructure, and investigators observed instances of sensitive personal data on infected systems though the initial access vector for this operation remains unclear.