Billbug returns after two years to conduct an espionage campaign
Billbug returns after two years to conduct an espionage campaign
Threat Level
Actor Report
For a detailed threat advisory, download the pdf file here
Summary
After being widely active in the year 2018-2019, Billbug, a Chinese state-sponsored group, is back after almost two years. They have been attacking multiple government agencies in an Asian country since March 2022 as part of a campaign targeting digital certificate authorities.