Cybersecurity incident
Date: 2023-08-17 00:00:00
Affected organization: Southeast Asian gambling industry
Affected country: Undetermined
Industry: Arts, Entertainment, and Recreation
Event type: Exploitive
Event subtype: Undetermined
Motive: Political-Espionage
Actor: SVR (Calisto)
Actor type: Nation-State
Actor country: China
Description: Researchers from SentinelOne discover a second phase of the Operation ChattyGoblin carried out by a China-aligned APT group known as 'Bronze Starlight', targeting the Southeast Asian gambling industry with malware signed using a valid certificate used by the Ivacy VPN provider.