Threat Research

Between July and August 2025, TA415 conducted spearphishing campaigns targeting U.S. government, think tanks, and academic institutions using U.S.-China economic-themed lures. The group impersonated prominent entities like the Select Committee on Strategic Competition and the US-China Business Council to target individuals focused on U.S.-China relations....

Since 2022, Threat Intelligence Group has tracked cyber espionage campaigns by China-nexus actors using POISONPLUG.SHADOW. These operations leverage a custom obfuscating compiler, "ScatterBrain," to target entities across Europe and the Asia-Pacific region....