5389

Proofpoint reported that in early March 2026 the suspected China-aligned actor UNKInnerAmbush ran a phishing campaign against Middle Eastern government and diplomatic organizations using emails from a likely compromised address ('uzbembishelcat.kg') that linked to a Google Drive file purported to contain sensitive images and allegations of Israeli plans to attack Gulf oil and gas infrastructure.