Threats · 186 days ago

China‑Suspected Espionage Targets Southeast Asian Militaries Since 2020

Unit 42 links cluster CL‑STA‑1087, with moderate confidence, to China‑based state actors targeting Southeast Asian militaries. The campaign, active since at least 2020, used custom backdoors AppleChris and MemFun and a Getpass credential harvester to collect narrowly targeted military documents.

Timeline

• Mar 12 Reported by Unit 42

Sources

1 source covering this story

• Unit 42 Mar 12

  Suspected China-Based Espionage Operation Against Military Targets in Southeast Asia

  An espionage operation demonstrated strategic operational patience against targets in Southeast Asia, deploying custom backdoors.

Entities

• CL-STA-1087

Part of the PlainSec briefing for 2026-03-13

Editions

• Briefing for 2026-03-13

Related stories

• Iran-Aligned Actors Escalate Cyber Attacks on US, Allies
• Iran-Linked Hackers Cripple Stryker's Global Microsoft Environment
• Law Enforcement Dismantles Global SocksEscort Residential-Proxy Botnet