What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

TrendAI reports a China-linked threat group (Shadow-Earth-053, with overlap from Shadow-Earth-054) that since December 2024 has exploited Microsoft Exchange and other vulnerabilities to infiltrate government, defense, technology and transportation networks across at least eight countries; attackers deployed web shells, ShadowPad and other backdoors, used legitimate tools for evasion and lateral movement, and appear to be prepositioning for long-term espionage and potential destructive operations.