Targeted Malware Attacks against NGO Linked to Attacks on Burmese Government Websites - The Citizen Lab

This report analyzes two targeted malware campaigns against an environmental NGO in Southeast Asia, uncovering connections to broader attacks on Burmese government websites and Tibetan groups, detailing phishing-like email lures, strategic web compromises, multiple malware components (PlugX and EvilGrab) and shared C2 infrastructure across campaigns and actors.