TA416 resumes European government espionage campaigns

Reported 07 Apr 2026 by otx · Severity: medium

Since mid-2025, China-aligned threat actor TA416 has resumed targeting European government and diplomatic organizations after a two-year operational shift to Southeast Asia. The campaigns primarily focused on diplomatic missions to the EU and NATO, using web bug reconnaissance an