Chinese APT24 Deploys Custom Malware, New Stealthy Tactics

3-Year Espionage Campaign Targeted Taiwanese Firms Akshaya Asokan (asokan_akshaya) • November 21, 2025

A hacking group with links to the Chinese government is behind a three-year-long espionage campaign that targeted Taiwanese companies with a custom malware variant, researchers said.

See Also: Compliance Team Guide for Evasion Prevention & Sanction Exposure Detection

Google Cloud attributed the campaign to APT24, a China-based hacking group that has been active since 2011. The latest campaign, which began in 2022, used multiple attack vectors to target Taiwanese companies using a malware variant called BADAUDIO.

"In July 2024, APT24 compromised a regional digital marketing firm in Taiwan - a supply chain attack that impacted more than 1,000 domains. Notably, the firm experienced multiple re-compromises over the last year, demonstrating APT24's persistent commitment to the operations," Google said.

The hacking group, also known as G0011, PITTY PANDA and Temp.Pittytiger, is largely focused on intellectual property theft ...