Targeted Attacks Follow Tibetans To The Cloud

**Executive summary:** Researchers from The Munk Center and Palo Alto Networks report that a suspected China-affiliated APT known as Scarlet Mimic has adapted its operations against the Tibetan community by switching from malicious attachments to credential-phishing via fake Google Drive/video sharing links, harvesting cloud credentials to infiltrate social networks and the Tibetan Government in Exile while reusing prior command-and-control infrastructure.