A Chinese threat actor targeted the Afghan National Security Council with spear-phishing attacks. The attackers pretended to be from the Administrative Office of the President of Afghanistan to get victims to download a dropper.