The China-linked APT group Thrip is continuing to target entities in Southeast Asia even after its activity was uncovered by Symantec. The group has been active since 2013, but this is the first time the security firm has publicly shared details of its activities. Experts have identified a dozen victims in several countries, including Hong Kong, Macau, Indonesia, the Philippines, Malaysia and Vietnam. The Thrip group used both custom malware and legitimate tools to hit its targets that continue to include defense contractors, telecoms companies, and satellite operators.”]
Source: https://securityaffairs.co/wordpress/91008/apt/thrip-link-billbug.html