A Chinese threat actor targeted two research institutes run by Rostec, a major Russian state-owned defense conglomerate. The attackers used spear-phishing lures to plant malware and steal data on Russian radar and electronic warfare capabilities.