The group has links with Winnti or APT27.

A Chinese hacking group broke into a national data center in Mongolia late last year, quietly planting malware into local government websites.