CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure

June 25, 2026 · Unit 42 · Severity: CRITICAL

Unit 42 reports that CL-STA-1062 is actively targeting government entities and critical infrastructure in Southeast Asia for espionage purposes. The threat actor employs a hybrid toolkit that includes a custom backdoor called TinyRCT. The ongoing campaign underscores the persistent cyber espionage threat facing government networks in the region.

Key Takeaways

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure — Government entities and critical infrastructure were targeted for espionage in SE Asia by...
Classified as critical severity, this development demands immediate attention from security teams.
Active attack campaigns require immediate defensive measures including network segmentation and monitoring.
Immediate investigation and remediation are recommended based on the severity of this threat.