TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Infosecurity Magazine

Chinese Hackers Target European Governments in Espionage Campaigns

2026-04-01 · Read original ↗

ATT&CK techniques detected

2 predictions
T1566.002Spearphishing Link
93%
"the researchers, web bugs, also known as ‘ tracking pixel, ’ refer to tiny invisible objects embedded in an email that triggers an http request to a remote server when opened, revealing the recipient ' s ip address, user agent. and time of access. this allows the threat actor to …"
T1583.001Domains
84%
", earth preta, stately taurus, honeymyte and hive0154, likely refer to campaigns where ta416 and unk _ steadysplit were working together. ta416 ’ s infrastructure ta416 uses a steady supply of re - registered, formerly legitimate domains for c2, malware delivery and web bugs, oft…"

Summary

Chinese state-backed group TA416 had suspended its cyber espionage operations in Europe since 2023, noted Proofpoint