Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign

Why it matters: A Southeast Asian government faces ongoing compromise from three China-aligned cyber clusters.
- Three China-linked threat clusters are actively engaged in a "complex and well-resourced operation" against a Southeast Asian government.
- Various malware families, including HIUPAN (also known as USBFect and MISTCLOAK), have been deployed as part of these campaigns.
- The 2025 cyber campaign indicates a sustained and strategic effort to compromise government systems in the region.
Three sophisticated, China-aligned cyber threat clusters launched a "complex and well-resourced operation" targeting a Southeast Asian government organization in 2025, deploying multiple malware families including HIUPAN. This coordinated campaign highlights a significant, state-sponsored cyber espionage effort against regional governments.




