China-linked hackers led phishing campaigns targeting journalists and activists, researchers say

### Executive Summary: The Citizen Lab and ICIJ investigation documents two nation-state‑linked phishing campaigns (GLITTER CARP and SEQUIN CARP) operating over nine months using over 100 malicious domains to target journalists and diaspora activists from Tibet, Taiwan, Hong Kong, and the Uyghur region, aiming to steal credentials via impersonation and social engineering to enable follow‑on operations.