Threat Actor
CL-STA-1087
- First Reported
- Mar 13, 2026
- Latest Reported
- Mar 16, 2026
Reported Context (4)
- Palo Alto Networks attributes the reported espionage activity to this state-sponsored threat actor, which reportedly targeted Southeast Asian military organizations and had likely been active since at least 2020. Palo Alto Networks Details China-Linked Espionage Campaign Targeting Southeast Asian Militaries
- Palo Alto Networks Unit 42 designated this cluster for an espionage campaign targeting Southeast Asian military organizations from at least 2020. The activity is assessed as suspected state-sponsored and China-nexus; the article describes the China attribution with moderate confidence. Unit 42 Details Suspected China-Nexus Espionage Campaign Targeting Southeast Asian Military
- Palo Alto Networks Unit 42 tracks this cluster as a suspected China-based, state-sponsored espionage operation targeting Southeast Asian military organizations since at least 2020. Unit 42 Details CL-STA-1087 Espionage Campaign Targeting Southeast Asian Militaries
- Unit 42 attributes a years-long espionage campaign targeting Southeast Asian military organizations to this cluster. Its suspected China-linked, state-sponsored status is presented as an assessment, not confirmed attribution. Unit 42 Details CL-STA-1087 Espionage Campaign Targeting Southeast Asian Militaries
Malware (3)
People (2)
MITRE ATT&CK (23)
Vendors (1)
Products (4)
Tools (1)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.