The European Union on Monday imposed sanctions against two China-based and one Iranian company for cyberattacks against EU member states.
The EU listed China-based Integrity Technology Group and Anxun Information Technology, and Iranian company Emennet Pasargad.
Our investigation of a spearphishing campaign that targeted senior members of the World Uyghur Congress in March 2025 reveals a highly-customized attack delivery method. The ruse used by attackers replicates a pattern in which threat actors weaponize software and websites aimed at preserving and supporting marginalized and repressed cultures to target those same communities.