A major cybersecurity firm has published findings revealing a sophisticated multi-year espionage campaign that compromised government agencies, defence contractors, and critical infrastructure operators across more than a dozen countries.
The operation, attributed with high confidence to a state-sponsored threat actor, used custom malware capable of evading leading endpoint detection tools by abusing legitimate system administration software.
Affected organisations have been notified, and several national cybersecurity agencies have issued advisories recommending specific mitigation measures. The identified group has not publicly responded to the attribution.
