Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign

Overview

Three threat activity clusters aligned with China have targeted a government organization in Southeast Asia as part of what has been described as a "complex and well-resourced operation." The campaigns have led to the deployment of various malware families, including HIUPAN (aka USBFect, MISTCLOAK, or U2DiskWatch), PUBLOAD, EggStremeFuel (aka RawCookie), EggStremeLoader (aka Gorem RAT), MASOL

Organisations Involved

The following organisations are mentioned in relation to this incident: Cyber Campaign
Three, Linked Clusters Target Southeast Asian Government, Southeast Asia, Three China.

Multi-Source Coverage

This event has been reported across multiple outlets:

• Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign — thehackernews

Sources: thehackernews. Aggregated by Cybernews Agency pipeline.