Threats · 193 days ago

Chinese-Attributed Group Conducts Years-Long Espionage in Asia

CL-UNK-1068, assessed with high confidence as Chinese, has conducted covert espionage across South, Southeast and East Asia since 2020. Victims include energy, government and telecommunications; the actor uses tunneling, reconnaissance and credential theft for persistent access.

Timeline

• Mar 6 Reported by Unit 42

Sources

1 source covering this story

• Unit 42 Mar 6

  An Investigation Into Years of Undetected Operations Targeting High-Value Sectors

  We discuss their toolset, including tunneling, reconnaissance and credential theft.

Entities

• CL-UNK-1068

Part of the PlainSec briefing for 2026-03-07

Editions

• Briefing for 2026-03-07

Related stories

• Iran-Linked Cyberattacks Surge After US‑Israel Operation Epic Fury
• Attackers Use Terminal Paste Trick to Steal Credentials
• China‑linked APT Targets South American Telecoms with Three Implants