The Ke3chang cyberespionage group has been tied to a backdoor called Okrum that has been used to target diplomatic missions throughout Europe and Latin America. The attribution widens the scope of known activity of the group, an APT believed to be operating from China. The group continues to be active according to ESET, using revamped versions of BS2005/Ketrican and RoyalDNS. Okrum is only equipped with basic backdoor commands, such as downloading and uploading files, executing files and shell commands, according to the researcher.
Source: https://threatpost.com/ke3chang-apt-undocumented-backdoor/146537/