APT30

APT30 is a threat group suspected to be associated with the Chinese government. The group is known for its long-term sustained activity, adapting source code to maintain tools and infrastructure since at least 2005. APT30 targets members of the Association of Southeast Asian Nations (ASEAN) and uses a suite of tools including downloaders, backdoors, and components designed to infect removable drives and cross air-gapped networks. It frequently registers its own DNS domains for command and control activities.