Targeted espionage against Cambodian government entities

Reported 11 Jun 2026 by otx · Severity: medium

Acronis Threat Research Unit identified two espionage campaigns targeting Cambodian government entities in defense and public works sectors, attributed to a cluster tracked as Khmer Shadow. Both campaigns delivered a custom C++ loader named NIGHTFORGE through government-themed lu