Suspected Chinese APT Groups Conduct Cyber Espionage Operations Against ASEAN Entities

Researchers have identified two Chinese advanced persistent threat (APT) groups engaged in cyberespionage against entities and member countries associated with the Association of Southeast Asian Nations (ASEAN). The first group known as Stately Taurus (aka Mustang Panda) developed two malware packages aimed at organizations in Myanmar the Philippines Japan and Singapore. These attacks coincided with the ASEAN-Australia Special Summit held from March 4-6 2024. The second unnamed Chinese APT group targeted an ASEAN-affiliated entity and has focused on government entities in Southeast Asian countries such as Cambodia Laos and Singapore.