Skip to content
Threat Feed
Subscribe

Tag

Southeast Asia

3 briefs RSS
high threat

Jewelbug APT Dual-Purpose Espionage and Fraud Operations

Jewelbug, a China-linked mercenary APT, uses a custom C2 platform called XG-Web to conduct both state-sponsored espionage and large-scale cryptocurrency theft using custom backdoors and malicious browser extensions.

Jewelbug apt espionage credential-theft malware china middle-east southeast-asia browser-security
3t
high advisory

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

A sophisticated Go-based implant, dubbed GoSerpent, has been utilized by an unidentified threat actor since late 2025 to conduct cyber espionage against government and diplomatic entities in Southeast Asia, focusing on long-term access, sensitive data collection, and credential dumping for exfiltration.

espionage malware Go RAT APT Southeast Asia
2r 6t
high advisory

GoSerpent Backdoor and Stowaway RAT Target Government Entities in Southeast Asia for Data Exfiltration

An unnamed threat actor is deploying a sophisticated two-phase attack, utilizing the GoSerpent backdoor, Stowaway RAT, and custom tools like ThumbcacheService and TmcLoader/TmcPayload, to persistently collect sensitive data and credentials from government and diplomatic entities in Southeast Asia for exfiltration.

backdoor rat data-exfiltration government southeast-asia
3r 9t