Ocean Lotus, a Vietnamese APT, was found deploying three zero days on Chinese networks. The attacks were primarily directed at gaining and expanding access to routers, networks, and cameras in China. Ocean Lotus could have also incorporated some of the compromised devices into its Torii botnet.