Canadian media revealed that in November 2016, the International Civil Aviation Organization (ICAO) was a hit by a large-scale cyberattack. The security breach was discovered by an analyst at Lockheed Martin that immediately informed the organization. Experts believe the attack was carried out by the China-linked APT group LuckyMouse (aka Emissary Panda, APT27 and Threat Group 3390, and Bronze Union). Four members of the ICAO information and communication technology team attempted to conceal evidence of their own incompetence, facilitated by the absence of their supervisor.”]
Source: https://securityaffairs.co/wordpress/81790/apt/icao-hack-2016.html