Operation Cloud Hopper

**Executive summary:** Operation Cloud Hopper is a large-scale, sustained espionage campaign attributed to APT10 that systematically compromised managed IT service providers to gain broad access to MSP customers worldwide and exfiltrate intellectual property and sensitive data; the report documents the actor's tooling (PlugX, ChChes, Quasar, RedLeaves), supply‑chain-style lateral movement and exfiltration techniques, interconnected dynamic‑DNS C2 infrastructure, targeting across multiple sectors and countries (including a Japan-focused subset), and provides timelines, IOCs and mitigation guidance.