Recent protests Hong Kong have been accompanied by surveillance and misinformation campaigns intended to clamp down on the activists.

Symantec now says that Thrip is likely another threat group — known Billbug or Lotus Blossom — that has been operating against targets in South Asia for approximately a decade.

The attackers, dubbed "Thrip" by analysts, have reemerged after they seemingly went underground for more than two years.