Recorded Future Research Concludes Chinese Ministry of State Security Behind APT3

Recorded Future's analysis attributes the APT3 (aka UPS / Gothic Panda / TG-0110) intrusion group to Guangzhou Boyu Information Technology (Boyusec) operating on behalf of China's Ministry of State Security (MSS). The report consolidates domain/WHOIS/IP evidence, Boyusec's partnerships with Guangdong ITSEC and Huawei, job postings, and prior media reporting to link Boyusec to MSS-directed espionage; it describes APT3's TTPs (spearphishing, zero-day exploits, RATs), broad victimology across defense, telecom, and technology sectors, and recommends organizations re-evaluate security controls and prior intrusions for APT3 activity.