OceanLotus: From external espionage to domestic targeting

Key Takeaways

• ESET documented a shift in OceanLotus's operational pattern from external espionage toward domestic targeting of new victims.
• The Vietnam-aligned APT group's new domestic focus changes the risk profile for organizations within the region.
• Security teams should incorporate updated OceanLotus research into detection of the group's evolving campaigns and tooling.