The China-aligned espionage actor TA416 (RedDelta, Vertigo Panda, Red Lich) has been observed targeting European and Middle Eastern governments, a sign of how its priorities are likely influenced by geopolitical flashpoints and escalations.

It is a shift following two years of focus on Southeast Asia and Mongolia, with recent campaigns most heavily targeting individuals or mailboxes associated with diplomatic missions and delegations to NATO and the EU.

Our threat research blog has the details. https://www.proofpoint.com/us/blog/threat-insight/id-come-running-back-eu-again-ta416-resumes-european-government-espionag