Spearphishing Campaign Deploys AZUREVEIL C2 Agent Targeting Czech Republic and Taiwan

A spearphishing campaign has been identified deploying the AZUREVEIL Adaptix C2 agent, targeting government officials, researchers, and technology workers in the Czech Republic and Taiwan. The campaign, attributed to a China-linked threat actor, began with the delivery of malicious ZIP archives disguised as official documents. The earliest known sample was traced back to Taiwan in March 2026, indicating a multi-stage attack chain. The operation is named Operation Dragon Weave and is part of a broader trend of state-sponsored cyber activities. The attack's sophistication and targeted nature raise significant concerns for national security and data integrity in the affected regions.

Key Points: • AZUREVEIL is a sophisticated Adaptix-based C2 agent deployed via spearphishing. • The campaign targets government and enterprise sectors in the Czech Republic and Taiwan. • It is linked to a China-based threat actor and began with malicious ZIP files in March 2026.