China-Linked TA416 Targets European Governments with OAuth-Based Phishing and PlugX Malware
China-linked TA416 resumed targeting European government and diplomatic organizations in mid-2025 after two years of limited activity in the region. The campaigns included web bugs, phishing, and PlugX delivery through malicious archives.
CERT24