A recruiter had contacted the chief design engineer via LinkedIn, which led to them exchanging emails. The engineer was actively looking for employment elsewhere and might not be employed by the victim much longer. A PHP (scripting language) backdoor shell was found on the system. The likely threat actors were likely to be a Chinese hacking group that had long been suspected of being state funded by the state of state-funded hackers, according to an attack profiling report by the U.S. Department of Justice.”]