A Chinese APT group has focused last year on compromising critical infrastructure across North America.
Cisco has linked multiple intrusions to a group it tracks as UAT-8837.
UAT-8837 targets critical infrastructure sectors in North America
Cisco Talos is closely tracking UAT-8837, a threat actor we assess with medium confidence is a China-nexus advanced persistent threat (APT) actor.
Cisco Talos Blog (blog.talosintelligence.com)

