| SYMBOL | COMMON_NAME | aka. SYNONYMS | 
This threat actor targets Uighurs—a minority ethnic group located primarily in northwestern China—and devices from Chinese mobile phone manufacturer Xiaomi, for espionage purposes.
| 2020-06-01
            
            ⋅
            
            Lookout
            ⋅ Mobile APT SurveillanceCampaigns Targeting Uyghurs A collection of long-running Android tooling connected to a Chinese mAPT actor CarbonSteal DoubleAgent GoldenEagle SilkBean | 
| 2020-03-02
            
            ⋅
            
            Virus Bulletin
            ⋅ Pulling the PKPLUG: the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary HenBox Farseer PlugX Poison Ivy | 
| 2019-10-03
            
            ⋅
            
            Palo Alto Networks Unit 42
            ⋅ PKPLUG: Chinese Cyber Espionage Group Attacking Asia HenBox Farseer PlugX | 
| 2019-01-01
            
            ⋅
            
            Council on Foreign Relations
            ⋅ HenBox HenBox | 
| 2018-03-13
            
            ⋅
            
            Palo Alto Networks Unit 42
            ⋅ HenBox: The Chickens Come Home to Roost HenBox |