An unknown Chinese-speaking threat actor has been targeting betting companies in Taiwan, Hong Kong, and the Philippines. The latest campaign was spotted by researchers at Avast, who have sampled several malware tools from the threat actors. The adversary appears to be sophisticated, and its toolset features code similarities to APT group backdoors analyzed in two 2015 and 2017 reports by Palo Alto and BlackBerry, respectively. An email with a laced installer pretends to be a critical WPS Office update, but in most attacks, threat actors use a different method.”]