China-Aligned Threat Groups

China-Linked UNC6384 Exploits Unpatched Windows Shortcut Flaw to Spy on European Diplomats

Researchers say the campaign deploys PlugX via a signed Canon utility using DLL sideloading.