A China-nexus advanced persistent threat group tracked as UAT-8302 by Cisco Talos has conducted attacks against government entities in South America since late 2024 and government agencies in southeastern Europe in 2025. Post-exploitation activities involve the deployment of custom malware families.
