Key Findings China-nexus APT group UAT-8302 has targeted government entities in South America since late 2024 and southeastern Europe in 2025 The group deploys shared malware families previously used by other China-aligned threat actors, indicating close operational relationships between multiple APT clusters NetDraft (NosyDoor), a .NET-based backdoor, connects UAT-8302 to at least five other known threat clusters including Jewelbug, Earth Estries, and LongNosedGoblin Post-co
