Lotus Blossom's New Attack Campaign: Domain Fronting and Abusing Centralized Domain Management (Part 1)

Published

2025-03-20 03:40

Collected

2026-09-02 08:25

---
id: 7302
title: "Lotus Blossom's New Attack Campaign: Domain Fronting and Abusing Centralized Domain Management (Part 1)"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/lotus-blossoms-new-attack-campaign-domain-fronting-and-abusing-centralized-domain-management-part-1/"
published_at: "2025-03-20T03:40:00Z"
tags: ["phishing", "apt", "vpn", "southeast-asia", "lotus-blossom", "domain-fronting"]
phying_url: "https://phying.com/item/7302"
lang: en
---

# Lotus Blossom's New Attack Campaign: Domain Fronting and Abusing Centralized Domain Management (Part 1)

## Summary

Part 1 of the English Lotus Blossom series overviews the APT active in Southeast Asia since 2012: leaked VPN accounts, OTT-app phishing, abused IT management systems, and Domain Fronting to hide C2.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2025-03-20T03:40:00Z
- **Original:** https://blog.viettelcybersecurity.com/lotus-blossoms-new-attack-campaign-domain-fronting-and-abusing-centralized-domain-management-part-1/
- **Phying News:** https://phying.com/item/7302