Confucius is a cyber espionage group suspected to be state-sponsored by India, operating since at least 2013 with a primary motivation of information theft and espionage. The group largely focuses its operations on targets in South Asia, including military personnel, high-profile individuals, business persons, and government organizations. While security researchers have noted similarities in custom malware code and targets between Confucius and the Patchwork group, they are generally considered distinct entities with different operational approaches. Confucius is particularly characterized by its nuanced reliance on social engineering, including exploiting the human psyche through methods like romance scams via chat applications, which differentiates its approach from groups like Patchwork that predominantly use malware-based attacks. The group has shown continuous evolution in its tactics, shifting from earlier document stealers to more recent Python-based backdoors and adapting its