We are grateful to China Digital Times, Epoch Times, Bowen Press, and HK01 for
their participation.Thanks to our colleagues for review and assistance: John Scott-Railton, Lotus Ruan, Jeffrey Knockel, Lokman Tsui, Valkyrie-X Security Research Group, Andrew
Hilts, Ron Deibert, and TNG.This report reveals a campaign of reconnaissance, phishing, and malware operations that use content and domains made to mimic Chinese language news websites.This project was supported by the John T. and Catherine D. MacArthur Foundation
