China-Linked Threat Group Targets Southeast Asian Critical Infrastructure with New TinyRCT Backdoor

A China-linked threat group has targeted critical infrastructure in Southeast Asia using a newly identified custom backdoor named TinyRCT. The attack focuses on regional organizations, though specific sectors, victim names, and exact timelines were not disclosed. No technical indicators such as CVE IDs, malware hashes, or infection vectors were provided in the report. The backdoor’s functionality and impact on compromised systems remain unspecified beyond its use for unauthorized access. The campaign highlights persistent cyber espionage activity attributed to Chinese state-sponsored actors.