Chinese APT Infrastructure Mimics Cloud Backup Services

Cambodian government entities were discovered to be targeted and compromised by Chinese APT actors.

The threat actors are using the infrastructure to masquerade as a cloud backup service. The infrastructure also exhibits several malicious nature and persistent connections.

China has recently invested in a project to modernize Cambodia’s Ream Naval base, which was initially stopped by both countries. This created a controversy among the Western Nations. 

Chinese APT Mimics Cloud Backup

A malicious SSL certificate was found to be used …

apt backup backup service base cambodia china chinese chinese apt cloud cloud backup compromised connections entities government infrastructure malicious nature persistent project service services threat threat actors