Operation Diànxùn: Cyberespionage Campaign Targeting Telecommunication Companies

This McAfee ATR report details Operation Diànxùn, an espionage campaign that targeted telecommunications firms in Southeast Asia, Europe, and the US by luring victims to phishing domains mimicking Huawei career pages to deliver malware (masquerading as Flash) and deploy Cobalt Strike beacons; the report links the campaign to Chinese-linked groups RedDelta and Mustang Panda, provides IoCs (e.g., update.careerhuawei.net, update.huaweiyuncdn.com, flach.cn), and recommends multilayer defenses and McAfee product protections.