A formerly unknown Chinese-speaking threat actor has been linked to a long-standing evasive operation aimed at South East Asian targets as far back as July 2020 to deploy a kernel-mode rootkit on compromised Windows systems. Attacks mounted by the hacking group, dubbedGhostEmperorby Kaspersky, are also said to have used a “sophisticated multi-stage malware framework” that allows for providing