China’s elite hackers expand target list to European Union

ESET reports multiple state-aligned threat actors conducting cyberespionage across regions, including Chinese-linked groups (MirrorFace, CloudSourcerer, Webworm) expanding targets into the EU and using legitimate SoftEther VPN executables to blend into victim networks; Iran-aligned MuddyWater is observed targeting transportation in Israel potentially to support military activity; Russian actors are exploiting one-day flaws in webmail servers such as Roundcube and Zimbra via XSS-laced spearphishing.