CERT24China-Linked TA416 Targets European Governments with OAuth-Based Phishing and PlugX MalwareLoading data…

China-Linked TA416 Targets European Governments with OAuth-Based Phishing and PlugX Malware

China-linked TA416 resumed targeting European government and diplomatic organizations in mid-2025 after two years of limited activity in the region. The campaigns included web bugs, phishing, and PlugX delivery through malicious archives.

← Back to intelligence

China-Linked TA416 Targets European Governments with OAuth-Based Phishing and PlugX Malware

China-linked TA416 resumed targeting European government and diplomatic organizations in mid-2025 after two years of limited activity in the region. The campaigns included web bugs, phishing, and PlugX delivery through malicious archives.