Computer systems at two Hong Kong universities were compromised in a Winnti Group campaign according to ESET researchers, during the Hong Kong protests that started in March 2019. The attacks were discovered in November 2019 after the security firm’s Augur machine-learning engine detected ShadowPad malware samples on multiple devices at the two universities. ESET thinks that three other universities were targeted in the same series of attacks by the hackers. The attackers’ end goal was to collect and steal info from the compromised computers.
Source: https://www.bleepingcomputer.com/news/security/winnti-group-infected-hong-kong-universities-with-malware/