[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![Unit42_Intel Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::4487645412.png) Unit XX [@Unit42_Intel](/creator/twitter/Unit42_Intel) on x 62.1K followers
Created: 2025-07-23 19:13:07 UTC

Threat group CL-STA-1020 targets Southeast Asian governments to gather covert intelligence. Tactics Unit XX has observed include deployment of the novel Windows backdoor we call HazyBeacon, as well as exfiltration via legitimate cloud services. Details:

![](https://pbs.twimg.com/media/GwkJxCLWgAA3JdT.jpg)

XXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1948099072633577762/c:line.svg)

[Post Link](https://x.com/Unit42_Intel/status/1948099072633577762)