The PROJECT CAMERASHY report, a joint project of CIRA and the cybersecurity firm ThreatConnect, definitively attributes cyber espionage activity associated with the Naikon Advanced Persistent Threat (APT) group to a specific unit (Unit 78020) within the Chinese People’s Liberation Army (PLA). For nearly five years, Unit 78020 has employed malicious email attachments and spear phishing campaigns to exploit its targets in the Southeast Asian military, diplomatic, and economic sectors. These targets include government entities in Cambodia, Indonesia, Laos, Malaysia, Myanmar, Nepal, the Philippines, Singapore, Thailand, and Vietnam along with the United Nations Development Programme (UNDP) and the Association of Southeast Asian Nations (ASEAN).
To read more, see: https://threatconnect.com/wp-content/uploads/ThreatConnect-Project-Camera-Shy-Report.pdf