#cyber-espionage

#cyber-espionage

The campaign is aimed at targeting employees of Voronezh Aircraft Production Association (VASO), one of the major aircraft production entities in Russia via using товарно-транспортная накладная (TTN) documents - critical to Russian logistics operations.

Tan Dailin was encouraged by the People's Liberation Army after participating in a hacking contest, leading to an intense hacker training camp where he learned advanced techniques.

APT36's focus on Linux-specific systems, particularly those used in government infrastructure, reinforces that no operating system is off-limits to nation-state attackers. This kind of multi-layered phishing attack highlights how threat actors are constantly evolving their tactics to quietly bypass defenses and exploit user trust.