A Chinese cyber-espionage group has used hacked edge devices to redirect users to captive portals and trick them into installing malware.
The campaign took place this March and targeted diplomats in Southeast Asia.
PRC-Nexus Espionage Campaign Hijacks Web Traffic to Target Diplomats | Google Cloud Blog
A social engineering campaign leveraging signed malware, evasive tactics, and captive portal hijacking.
Google Cloud Blog (cloud.google.com)
