Researchers uncover vast cyberespionage operation targeting dozens of governments worldwide

Unit 42 identified a widespread Asia-based cyberespionage campaign called “Diaoyu” that used phishing (metadata-labeled payloads), exploitation toolkits and Cobalt Strike to compromise at least 70 institutions across 37 countries and conduct reconnaissance in 155 countries; targets included ministries, telecoms, police and critical national infrastructure, with intrusions persisting for months and activity aligning to geopolitical events.