
Chinese Threat Actor UAT-7237 Targets Southeast Asian Governments and Energy Infrastructure with TinyRCT Backdoor
Palo Alto Networks' Unit 42 has linked its tracked cluster CL-STA-1062 to UAT-7237, a Chinese threat actor previously identified by Cisco Talos. Active since at least March 2022, the group has expanded its operations into Southeast Asian government agencies, energy sectors, and state-owned enterprises in 2025, deploying a backdoor malware known as TinyRCT.
Source: iThome 台灣










