FireEye describes a Chinese cyberespionage campaign targeting Israeli entities. The researchers identified some similarities between this threat actor, dubbed "UNC215," and APT27 (also known as Emissary Panda), but they don't definitively attribute the activity to APT27: "In early 2019, Mandiant began identifying and responding to intrusions in the Middle East by Chinese espionage group UNC215. These intrusions exploited the Microsoft SharePoint vulnerability CVE-2019-0604 to install web shells and FOCUSFJORD payloads at targets in the Middle East and Central Asia....In addition to data from Mandiant Incident Response and FireEye telemetry, we worked with Israeli defense agencies to review data from additional...