Sophos published a report detailing three clusters of activity targeting a high-profile government organization in Southeast Asia. Each cluster has some degree of known overlap with existing Chinese APTs and shares significant TTPs. All three targeted documents are suggested to be valuable to intelligence.