Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

**Executive Summary:** This multi-organization advisory catalogs observed threat actor activity — listing numerous malicious domains, obfuscation hosts, webshells, binaries, and potentially dropped files — maps behaviors to the MITRE ATT&CK for Enterprise framework, and provides mitigations, testing guidance for defenders, and reporting contacts for affected organizations.