CERT24Chinese APT CL-STA-1062 expands attacks on Southeast Asian critical infrastructure with custom malwareLoading data…
CERT24Threat Observatory
Period

Chinese APT CL-STA-1062 expands attacks on Southeast Asian critical infrastructure with custom malware

According to Palo Alto Networks Unit 42, the Chinese-speaking threat actor CL-STA-1062 has conducted persistent operations across East Asia since at least March 2022 and shifted its focus from mid-2025 onward to Southeast Asian government entities and state-owned critical energy infrastructure. Between October and December 2025, Unit 42 detected breaches at a minimum of ten organizations in the region.

← Back to intelligence

Chinese APT CL-STA-1062 expands attacks on Southeast Asian critical infrastructure with custom malware

According to Palo Alto Networks Unit 42, the Chinese-speaking threat actor CL-STA-1062 has conducted persistent operations across East Asia since at least March 2022 and shifted its focus from mid-2025 onward to Southeast Asian government entities and state-owned critical energy infrastructure. Between October and December 2025, Unit 42 detected breaches at a minimum of ten organizations in the region.