Cyber threats / Incident register

Earth Alux Espionage Campaign Targets ASEAN Defense Ministries

Espionage campaign · Oct 15, 2025
High STIX 2.1 MISP
Summary

Trend Micro researchers disclosed an ongoing espionage campaign by Earth Alux (China-linked) targeting defense ministries and military contractors across Thailand, Philippines, Vietnam, and Malaysia. The group deployed VARGEIT and COBEACON implants via trojanized military procurement documents. The campaign has been active since at least Q4 2025, with lateral movement into classified networks confirmed at two ASEAN defense organizations.

Sources
Attribution
Earth Alux (China-linked)
Where
TH ThailandPH PhilippinesVN VietnamMY Malaysia
Sectors: Defense, Government, Defense Industrial Base
EU relevance
Medium
Hit defense in Malaysia, where the EU has Peace & Security projects; 5 more such overlaps
Graded by rules: EU member states affected, EU response, EU sanctions, EU projects in the sector hit.