Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

A Chinese-speaking advanced persistent threat actor has been linked to a new custom backdoor called TinyRCT. This backdoor is being used in cyber attacks targeting government entities and critical infrastructure in Southeast Asia. The attacks are specifically aimed at state-owned enterprises in the energy and government sectors. The threat actor responsible is known as CL-STA-1062, and has been identified by Palo Alto Networks. The actor's activities are focused on Southeast Asia, indicating a targeted campaign in the region.