{"id":11194,"date":"2015-05-31T00:00:00","date_gmt":"2015-05-31T00:00:00","guid":{"rendered":"http:\/\/localhost\/cyber-operations\/ocean-lotus\/"},"modified":"2015-05-31T00:00:00","modified_gmt":"2015-05-31T00:00:00","slug":"ocean-lotus","status":"publish","type":"post","link":"https:\/\/www.cfr.org\/cyber-operations\/ocean-lotus","title":{"rendered":"Ocean Lotus"},"content":{"rendered":"<p>This threat actor,&nbsp;known to use watering-hole attacks to compromise victims, targets organizations of interest to the Vietnamese government for espionage purposes. Victims have included <a href=\"https:\/\/www.eff.org\/deeplinks\/2014\/01\/vietnamese-malware-gets-personal\">human rights organizations<\/a>, research institutes and maritime construction firms in China, and media organizations. Also <a href=\"https:\/\/www.cyberscoop.com\/apt-32-trump-duterte-hacking-xi-jinping-vietnam\/\">believed<\/a>&nbsp;to have been responsible for disclosing confidential Filipino&nbsp;government documents.&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This threat actor,&nbsp;known to use watering-hole attacks to compromise victims, targets organizations of interest to the Vietnamese government for espionage purposes. Victims have included human rights organizations, research institutes and maritime construction firms in China, and media organizations. Also believed&nbsp;to have been responsible for disclosing confidential Filipino&nbsp;government documents.&nbsp;<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_cloudinary_featured_overwrite":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3],"tags":[],"cyber_operation":[49],"state_sponsor":[192],"victim_category":[32,63,138],"victim_government_response":[186],"victim":[26,31,59,97,167,182,191],"class_list":["post-11194","post","type-post","status-publish","format-standard","hentry","category-threat-actor","cyber_operation-espionage","state_sponsor-vietnam","victim_category-civil-society","victim_category-government","victim_category-private-sector","victim_government_response-unknown","victim-cambodia","victim-china","victim-germany","victim-lao-peoples-democratic-republic","victim-the-philippines","victim-united-states","victim-vietnam"],"acf":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts\/11194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/comments?post=11194"}],"version-history":[{"count":0,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts\/11194\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/media?parent=11194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/categories?post=11194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/tags?post=11194"},{"taxonomy":"cyber_operation","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/cyber_operation?post=11194"},{"taxonomy":"state_sponsor","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/state_sponsor?post=11194"},{"taxonomy":"victim_category","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim_category?post=11194"},{"taxonomy":"victim_government_response","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim_government_response?post=11194"},{"taxonomy":"victim","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim?post=11194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}