The governments of Afghanistan, Kyrgyzstan and Uzbekistan have all been targeted by a Chinese-state-backed advanced persistent threat (APT) group, dubbed IndigoZebra, according to intelligence produced by Check Point Research (CPR).
The group appears to have infiltrated the Afghan National Security Council (NSC) in a targeted, tailored spear phishing attack, by sending an email with a document attached for review which impersonated the Office of the President of Afghanistan as a lure to infiltrate the NSC.