Aptos;mso-fareast-theme-font:minor-latin;mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";mso-bidi-theme-font:minor-bidi;
mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA\">SongXY
is a Chinese APT group that employs phishing tactics to initiate cyberespionage
campaigns. They utilize the Royal Road RTF builder, exploiting the
CVE-2018-0798 vulnerability in Microsoft Equation Editor. In one instance, they
sent a document containing a link to an attacker-controlled server, which
automatically triggered upon opening, allowing them to gather information about
the target\'s system configuration
