logo

Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government

ID: cc777ee2-28cb-5f02-8e1e-ce9c3dee7657

STIX ID: report--cc777ee2-28cb-5f02-8e1e-ce9c3dee7657

Feed Name: Palo Alto Networks Unit 42

Threat Score
90/100

Date Published: 2026-03-26

Date Updated: 2026-04-28

Author: Doel Santos and Hiroaki Hara

...
...

**Executive Summary:** Unit 42 uncovered coordinated, China‑aligned cyberespionage campaigns against a Southeast Asian government (June–Aug 2025) involving USB‑propagated worms and multiple loaders/RATs (USBFect/PUBLOAD, EggStremeFuel, Masol, EggStreme/Gorem, TrackBak, Hypnosis, FluffyGh0st) that established persistent access and exfiltration capabilities, with numerous IOCs provided.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.