APT32__2015__OceanLotusReport.pdf

### Executive Summary This report documents OceanLotus (APT-C-00) conducting a multi-year, targeted espionage campaign (2012–2015+) against Chinese government, maritime, research and industry targets using spear‑phishing and watering‑hole techniques, multiple custom malware families (Windows and macOS), distributed C2 infrastructure and operational tradecraft; it includes timelines, infection statistics, sample MD5s, domain/IP indicators and an assessment of the group's organization and capabilities.