ReliaQuest's Agentic AI Uncovers New China-Linked Cluster OP-512

**ReliaQuest assesses with moderate-high confidence that a previously unseen China-linked espionage cluster, OP-512, deployed a custom, cryptographically unique web shell framework against legacy IIS servers to achieve persistent, authenticated remote access, automated self-reporting via hex-encoded DNS subdomains, and in-memory privilege escalation; the report maps OP-512 against other China-linked clusters, provides technical analysis and IoCs (domains, IPs, patterns), and prescribes behavioral detection and remediation steps such as isolating EOL .NET servers, monitoring ASP.NET compilation directories, and blocking anomalous DNS/HTTP patterns.**