Dossier
OceanLotus
Coverage of OceanLotus in the Nexus archive.
- OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack
The Vietnam-aligned threat actor OceanLotus has been attributed to two campaigns targeting domestic entities and stock investors in Vietnam using the SPECTRALVIPER backdoor. One campaign involved a prolonged cyber espionage operation against a Vietnamese infrastructure and transport construction corporation from mid-2024 to February 2026, alongside a supply chain attack.