Unit 42 links CL-STA-1087 to a long-running espionage campaign against Southeast Asian militaries. The group used AppleChris and MemFun backdoors and a Getpass credential harvester to collect sensitive military documents and credentials.
Part of the PlainSec briefing for 2026-03-14