Tag: uat 11587

China-Nexus Espionage Campaign Exploits Outlook, OneDrive

A sneaky espionage campaign, tracked as UAT-11587, has been exploiting Microsoft Outlook and OneDrive to secretly control its targets, with a reach that spans 16 entities across eight Asian countries. The sophisticated attack, first detected in September 2025, has been targeting academic, think-tank, and civil-society organizations, with evidence of continued activity through May 2026.