The threat actor gave itself plenty of options to support command and control, tapping Microsoft Outlook, Slack, Discord, and file.io for online espionage.
Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia
Summary + source link. No paywalls, no tracking.