Naikon is an advanced persistent threat (APT) group assessed with high confidence to be affiliated with the Chinese People's Liberation Army (PLA) Chengdu Military Region Second Technical Reconnaissance Bureau (Military Unit Cover Designator 78020). The group has been active since at least 2010, primarily conducting cyber-espionage operations to gather geopolitical intelligence, particularly focusing on military and government organizations in Southeast Asia and the South China Sea region. Naikon distinguishes itself through a long-term attack model designed for extensive data exfiltration, the use of cultural liaisons to craft highly effective spear-phishing campaigns, and the strategic deployment of command and control infrastructure within target countries to facilitate real-time data theft. The group has shown an evolution in its operational methods, including a period of refining tactics and tools between 2015 and 2019 before resurfacing with updated methodologies. Naikon is also