Unit 42 Researchers Discover Multiple Espionage Operations Targeting Southeast Asian Government
Unit 42 attributes three espionage clusters targeting a Southeast Asian government to Stately Taurus, Alloy Taurus, and Gelsemium APTs.
70
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
2 articles · newest firstPersistent Attempts at Cyberespionage Against Southeast Asian Government Target Have Links to Alloy Taurus
Alloy Taurus (GALLIUM) compromised Southeast Asian government networks from 2022 to 2023 using Exchange web shells and undocumented .NET backdoors Reshell and Zapoa.
70
Appears with
- Alloy Taurusthreat actor · 2
- Unit 42organization · 2
- Palo Alto Networksorganization · 2
- China Chopperproduct · 2
- GoDumpLsassproduct · 1
- ToneShellmalware · 1
- Exchange Serverproduct · 1
- Southeast Asian government entitiesvictim · 1
- Stately Taurusthreat actor · 1
- ShadowPadmalware · 1
- Gelsemiumthreat actor · 1
- ShadowPadproduct · 1
- Microsoftvendor · 1
- Mustang Pandathreat actor · 1
- Kerbruteproduct · 1
- WebScanproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.