This threat actor targets telecommunications and technology companies, particularly regional telecommunication providers, high-tech manufacturers, firms specializing in technology with military applications, and Asia-based employees of global tech firms. Believed to have been active since at least 2007, this large threat group consists of several subgroups with distinct tactics and infrastructure.