: Attributed to TA416 (also known as Mustang Panda or Red Delta ), a China-based threat group known for targeting diplomatic and government entities.

Security researchers, most notably from Proofpoint and Google's Threat Analysis Group (TAG) , identified this campaign as a highly targeted espionage effort.

For further reading, you can access the comprehensive threat intelligence reports from Proofpoint and the National Security Archive .

: The campaign primarily targeted European diplomatic entities and government organizations, often those involved in refugee assistance or border security.

: The victim receives an email containing a link to a malicious file, often hosted on legitimate services like Dropbox.