Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware

The Chinese APT CL-STA-1062 is actively targeting Southeast Asian government and critical energy infrastructure using a combination of open-source tools and the new TinyRCT custom backdoor. This group executes persistent operations by deploying web shells and bespoke malware to facilitate data exfiltration and long-term network access.