APT 27, APT 30, APT 31 and Gallium are said to be the perpetrators of the attacks
There's a growing trend for state-backed APT groups to carry out financially-motivated crimes, alongside their usual espionage operations
The campaign has been linked to Vietnam-state-backed threat group APT32
Spear-phishing attacks started just after the WHO issued its first warning about novel coronavirus