In the latest installment of the international espionage saga, our favorite China-aligned threat actor, UTA0388, has upgraded from mere health enthusiasts to digital rogues. Previously known as HealthKick, they’re now sporting a shiny new malware toy, GOVERSHELL, which promises less fitness advice and more cyber shenanigans.

Experts say the group’s spear-phishing campaigns are now more sophisticated than ever, targeting North America, Asia, and Europe with the precision of a middle schooler trying to forge a parent’s signature. Using fake identities of legitimate-sounding researchers and analysts, they’ve perfected the art of saying, “I’m totally not a hacker, but here’s a link to free malware!”

As UTA0388 levels up in the world of digital crime, cybersecurity professionals across the globe are left scratching their heads, wondering, “Is this a side quest, or the main storyline?” Either way, users are advised to remain vigilant and maybe invest in a good cyber-spellbook.