A group with ties to China tracked as TA416 but widely known as Mustang Panda has targeted European diplomats since August 2020.
The most recent activity employs refreshed lures to coincide with the Russian invasion of Ukraine.
A new report by Proofpoint found that TA416 leads cyber-espionage campaigns against the EU, focusing on long-term goals rather than opportunistic gains.
The group has not changed their methods since the campaign began, making easy work for analysts.