Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

This advisory details threat actor activity and mitigation guidance: it lists numerous IOCs (domains, obfuscation hosts), known webshells, binaries/scripts, and potentially dropped files, maps behaviors to the MITRE ATT&CK framework, and provides recommended testing, defensive measures, and reporting contacts for multiple countries and agencies.