‘GhostEmperor’ returns: Mysterious Chinese hacking group spotted for first time in two years

Sygnia researchers have attributed a recent intrusion to GhostEmperor, a covert Chinese APT that conducts sophisticated supply-chain attacks targeting telecommunications and government entities in Southeast Asia; the group resurfaced after more than two years and reportedly improved its evasion techniques, using a compromised client network to pivot to another victim.