#DarkPeony

TA416 Targets European Govts with PlugX & OAuth Phishing

China-linked TA416 has resumed targeting European government and diplomatic entities since mid-2025 using PlugX and OAuth-based phishing attacks.