The Chinese state actor Gallium targeted Middle Eastern telecommunications companies in a prolonged spear-phishing campaign dubbed Operation Soft Cell. After gaining access, attackers have been observed stealing credentials, performing general reconnaissance, and exfiltrating data.