I’d come running back to EU again: TA416 resumes European government espionage campaigns

China-aligned TA416 has aggressively resumed and evolved its spearphishing and malware campaigns against European and, recently, Middle Eastern diplomatic and government entities—leveraging new infection chains and a continually updated PlugX backdoor—driven by shifting geopolitical priorities and ongoing conflicts.