Among other things, it uses custom malware frameworks used by other Chinese APT groups and its targeting “aligns with likely ...