Three China-linked clusters targeted a Southeast Asian government in 2025, deploying multiple malware families to secure persistent access.