China-linked threat group RedDelta has been engaged in a five-month long cyberattack against the Vatican and other Catholic Church-related organizations. Attacks have come in the form of spear phishing emails laced with the PlugX remote access tool (RAT) as the payload. Researchers believe this targeting of the Vatican would likely offer RedDelta insight into the negotiating position of the Holy See ahead of the deal s September 2020 renewal. The group has also expanded its victimology of its campaigns, as seen in new spear-themed attacks using decoy documents themed around Catholicism, Tibet-Ladakh relations, and the United Nations General Assembly Security Council.
Source: https://threatpost.com/hackers-continue-cyberattacks-against-vatican-catholic-orgs/159306/