China-linked Amaranth

Securityaffairs.Co •Pierluigi Paganini • February 5, 2026

China-linked hackers tracked as Amaranth-Dragon targeted government and law enforcement agencies across Southeast Asia in 2025. CheckPoint says China-linked threat actors, tracked as Amaranth-Dragon, carried out cyber-espionage campaigns in 2025 targeting government and law enforcement agencies across Southeast Asia. The activity is linked to the APT41 ecosystem and affected countries including Thailand, Indonesia, Singapore, and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

China-Linked Amaranth-Dragon Targets Southeast Asian Governments In 2025, hackers associated with China, identified as Amaranth-Dragon, conducted cyber-espionage campaigns against government and law enforcement agencies in Southeast Asia, affecting countries such as Thailand, Indonesia, and Singapore. This activity is linked to the APT41 ecosystem, highlighting ongoing threats in the region. 2 sources 24

Extracted Entities

China-linked Amaranth

The full story

Extracted Entities

APT Groups (2)

Countries (3)

Industries (1)