Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Chinese-Speaking Hackers Use TinyRCT Backdoor to Target Critical Energy Infrastructure
Malware Families
Excerpt
Throughout 2025, a highly coordinated cyber espionage campaign targeted government entities and critical energy infrastructure across Southeast Asia. Security researchers have attributed this activity to a Chinese-speaking threat actor tracked as CL-STA-1062, a group previously identified as UAT-7237. While this group historically focused on web hosting infrastructure in Taiwan, their recent operations highlight a strategic shift toward state-owned energy sectors and…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | f34bd1d485de437fe18360d1e850c3fd64415e49d691e610711d8d232071a0b1 | High | Score 85/100 | First seen |
| SHA256 | 00e09754526d0fe836ba27e3144ae161b0ecd3774abec5560504a16a67f0087c | High | Score 56/100 | First seen |
IOC Relationship Graph
Building graph…