Cambodia-focused cluster uses multistage infection chain with localized lures

A sophisticated, Cambodia-focused campaign leverages localized lures and a multistage infection chain—including DLL sideloading, encrypted payloads in PNG files, and vulnerable driver exploitation—to deploy SparkRAT for remote access, while aggressively disabling security protections.