APT16 is a China-based threat group that has launched spearphishing campaigns targeting Japanese and Taiwanese organizations. [1]
APT16 has compromised otherwise legitimate sites as staging servers for second-stage payloads.[1]