China-Backed MirrorFace Trains Sights on EU Diplomatic Corps

ESET researchers observed the China-linked APT MirrorFace conducting espionage against a diplomatic organization in the EU and noted an industry-wide shift by several China-aligned groups to abuse the legitimate SoftEther VPN to maintain stealthy remote access, blend malicious traffic with HTTPS, and appear as authorized remote users; the report warns this tactic is spreading across multiple state-aligned actors and regions.