The cyberespionage campaign known as SHADOW-EARTH-053 has been linked to a China-aligned threat actor. This campaign has specifically targeted government agencies, defense contractors, and critical infrastructure organizations across various countries in the Asia-Pacific region, employing a range of advanced exploitation and persistence techniques that mainly revolve around unpatched vulnerabilities in Microsoft Exchange and IIS.