China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing

A wave of high-impact incidents and active campaigns was reported across multiple fronts: China-linked TA416 is targeting European government and diplomatic organizations with OAuth-based phishing and PlugX payloads; North Korean actors (UNC1069) executed a targeted social‑engineering compromise of the Axios npm package; a novel cookie-controlled PHP web‑shell technique is being used for persistent remote code execution on Linux hosts; and a new SparkCat mobile trojan variant is stealing crypto wallet recovery images. Other notable events include a $285M Drain on the Solana DEX Drift linked to