Threat Group China aligned APT operators tracked as SHADOW VOID 044 and SHADOW EARTH 045 Threat Type JScript based command and control framework abusing trusted Windows utilities Exploited Vulnerabilities Abuse of Windows Script Host trust model, mshta.exe execution, ScriptControl ActiveX usage, browser watering hole injection, legacy Chrome V8 flaws