OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack

Summary

The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a backdoor known as SPECTRALVIPER. The campaigns involve a prolonged cyber espionage operation aimed at a Vietnamese infrastructure and transport construction corporation between mid-2024 and February 2026, as well as a supply chain attack

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.