UAT-8302 Targets Government Entities Across Regions | MSSP Advisory

China-linked APT group UAT-8302 actively targets government entities across South America and southeastern Europe using custom malware families for post-exploitation activities. Cisco Talos tracks this threat as ongoing since late 2024, with the group deploying sophisticated toolsets after initial compromise. The attacks focus on government infrastructure with regional targeting patterns suggesting coordinated intelligence collection operations.

Government clients represent high-value targets for nation-state actors, and any compromise creates immediate compliance and contract liability for MSSPs managing these environments. Your own infrastructure becomes a secondary target once threat actors identify you as the service provider for compromised government accounts. Client retention depends on demonstrating proactive threat awareness before incidents occur.