New Chinese APT campaign found targeting European embassies

A China-based superior persistent risk (APT) marketing campaign has been concentrating on European authorities entities targeted on overseas and home insurance policies, in response to analysis by Examine Level.

The marketing campaign, dubbed SmugX, makes use of HTML smuggling, a way through which attackers disguise malicious payloads inside HTML paperwork.

Energetic since December 2022, the marketing campaign is probably going a direct continuation of a beforehand reported marketing campaign attributed to RedDelta and the Mustang Panda group, in response to the Examine Level report.

Marketing campaign concentrating on European embassies

Examine Level stated it has been monitoring the Chinese language risk actor for 2 months and has concluded that it’s concentrating on overseas and home coverage entities in addition to embassies in Europe.

“Mixed with different Chinese language based mostly group’s exercise beforehand reported by Examine Level Analysis, this represents a bigger pattern inside the Chinese language ecosystem, pointing to a shift in goal in direction of European entities, with a deal with their overseas coverage,” the report added.

Aside from the UK, the marketing campaign seems to be targeted on Japanese European nations, together with the Czech Republic, Slovakia, and Hungary. The aim of the marketing campaign, as per Examine Level’s evaluation, is to “come up with delicate data on the overseas insurance policies of these nations.”