In a series of attacks starting in 2017, Chinese threat actors are believed to have compromised telecommunication firms across Southeast Asia. The breaches were designed to extract data from the companies' servers and were likely used to launch more targeted spear-phishing attacks.