The investigation, which involved analyzing multiple victims, primarily military and government targets, revealed a stealthy operation involving various generations of custom malware and phishing tactics. (adsbygoogle = window.adsbygoogle || []).

push({}); A recent investigation by Bitdefender Labs has uncovered the activities of a previously unknown cyber threat group, dubbed “Unfading Sea Haze.” This group has been actively targeting high-level organizations, particularly military and government entities, in countries surrounding the South China Sea. The scope and nature of their attacks suggest a potential alignment with Chinese interests in the region.

It is worth noting that the South China Sea nations typically refer to countries that border the South China Sea. These include China, Taiwan, the Philippines, Malaysia, Brunei, Indonesia, and Vietnam. A Journey Through Time: Unraveling the Past Activities The investigation spanned at least eight victims and traced the group’s activities back to 2018, revealing a complex digital archaeology.

Unfading Sea Haze has repeatedly gained access to compromised systems, exploiting poor credential hygiene and inadequate patching practices. Their ability to remain invisible for over five years indicates a sophisticated and patient threat actor, likely backed by nation-state resources . Attribution: Clues Pointing to Chinese Cyber Ecosystem While a definitive attribution remains challenging, Bitdefender’s research provides sugge.