China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
Published: (April 3, 2026 at 01:34 PM EDT)
1 min read
Source: The Hacker News
Source: The Hacker News
A China-aligned threat actor has set its sights on European government and diplomatic organizations since mid‑2025, following a two‑year period of minimal targeting in the region.
The campaign has been attributed to TA416, a cluster of activity that overlaps with DarkPeony, RedDelta, Red Lich, SmugX, UNC6384, and Vertigo Panda.
“This TA416 activity included multiple…”