A Chinese hacking group dubbed Aoqin Dragon has been targeting government, education and telecommunication organizations in Southeast Asia and Australia since 2013. The primary focus of the attackers is espionage targeting Australia, Cambodia, Hong Kong, Singapore and Vietnam. Other techniques used include DLL hijacking, DNS Tunneling, Themida-packed files and DNS tunneling to evade post-compromise detection. The attackers’ infection strategy includes using a malicious document and tricking users into opening a weaponized Word document to install a backdoor.”]
Source: https://www.databreachtoday.com/chinese-linked-apt-spying-on-organizations-for-10-years-a-19323