A newly identified threat group, GopherWhisper, assessed by ESET Research as operating in alignment with Chinese state interests, has compromised at least 12 systems within a Mongolian government institution by routing malware communications through Microsoft 365 Outlook, Slack, and Discord – platforms most organizations trust and do not inspect deeply. ESET Research recovered extensive command-and-control message evidence confirming an active, sustained intrusion campaign. Organizations in government, defense, and diplomatic sectors that rely on these platforms face elevated risk of undetected long-term compromise.