Billbug returns after two years to conduct an espionage campaign

Threat Advisories

Billbug returns after two years to conduct an espionage campaign

Threat Level
Actor Report

For a detailed threat advisory, download the pdf file here

Summary

After being widely active in the year 2018-2019, Billbug, a Chinese state-sponsored group, is back after almost two years. They have been attacking multiple government agencies in an Asian country since March 2022 as part of a campaign targeting digital certificate authorities.