Cyber Threat Targets Governments, NGOs, and Think Tanks
Research has revealed Operation FishMedley, a sophisticated cyber-espionage campaign conducted by FishMonger, a China-aligned threat group operated by I-SOON. The campaign targeted governments, NGOs, and think tanks across Asia, Europe, and the United States, deploying implants such as ShadowPad, SodaMaster, and Spyder, which are commonly linked to Chinese espionage activities.
The disclosure follows a U.S. Department of Justice (DOJ) indictment against I-SOON employees for global cyber operations. The FBI has since added individuals linked to FishMonger to its Most Wanted list. ESET’s investigation traced attacks to Taiwan, Thailand, the U.S., Hungary, France, and Turkey, confirming the use of advanced cyber tools to exfiltrate sensitive data.
ESET’s report provides a detailed breakdown of the attack methods and tools used in Operation FishMedley. For the full analysis, visit WeLiveSecurity.com or follow ESET Research on X.
