CL-STA-1087
CL-STA-1087 is a threat actor group with an ideological motive, tracked by Brandefense. It uses 20 MITRE ATT&CK techniques.
- Techniques
- 20
- Exploited CVEs
- No CVE data
- Record updated
About CL-STA-1087.
CL-STA-1087 is a suspected state-sponsored espionage campaign operating out of China, targeting military organizations in Southeast Asia. The actor has demonstrated operational patience, maintaining dormant access for extended periods while focusing on precision intelligence collection and employing robust operational security measures. Their infrastructure includes the use of a legitimate cloud service for C2 operations, indicating a cloud-native approach. File timestamps and other indicators trace the campaign's activity back to 2020, suggesting a long-running operation.
Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.