Threats · 230 days ago

China-linked hackers target Southeast Asian militaries

Unit 42 links CL-STA-1087 to a long-running espionage campaign against Southeast Asian militaries. The group used AppleChris and MemFun backdoors and a Getpass credential harvester to collect sensitive military documents and credentials.

Timeline

• Mar 14 Reported by The Hacker News

Sources

1 source covering this story

• The Hacker News Mar 14

  Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware

  China-linked CL-STA-1087 targets Southeast Asian militaries since 2020 using AppleChris and MemFun for espionage and credential theft.

Entities

• CL-STA-1087

Part of the PlainSec briefing for 2026-03-14

Editions

• Briefing for 2026-03-14

Related stories

• Iran-aligned actors escalate cyber attacks on US, allies
• Law enforcement dismantles global SocksEscort residential-proxy botnet
• Operation Synergia III disrupts 45,000 malicious IPs