Confucius (G0142) is a Chinese state-sponsored threat actor primarily engaged in strategic espionage targeting government, diplomatic, and military entities, with a strong focus on Southeast Asia. While specific high-profile campaigns attributed solely to this actor have decreased in public reporting over the last 18 months, its activity is viewed as part of the broader PRC intelligence-gathering ecosystem.
OriginChina
SponsorPeople's Republic of China (PRC)
MotivationStrategic intelligence collection and political espionage
Target Sectors
GovernmentDiplomatic MissionsMilitaryEducationSoutheast Asian Regional Organizations
Known TTPs
Spear-phishing with malicious attachments
Use of custom backdoors (Confucius malware family)