Cybersecurity incident
Date: 2015-05-31 00:00:00
Affected organization: China Oilfield Services Limited
Affected country: China
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Political-Espionage
Actor: APT32
Actor type: Nation-State
Actor country: Viet Nam
Description: Vietnamese threat actor Ocean Lotus has compronised the websites of numerous entitities in Southeast Asia to be used for watering-hole attacks. Some of the organizations have also been targeted with malware aiming to install backdoors on their systems. The group has targeted ASEAN, China, Cambodia, Laos, and the Philippines.