Winnti Umbrella targeted government organizations in Hong Kong with malware to steal sensitive data from victims. The attacks are likely an expansion of Operation CuckooBees, previously documented in May 2022, which targeted businesses' networks in the United States and Europe to steal intellectual property.