Operation SignSight is a cyber espionage campaign that first emerged in July 2020, assessed with high confidence to be orchestrated by state-sponsored actors, with suspected ties to China, evidenced by their command and control infrastructure. Its primary motivation is cyberespionage, specifically focusing on compromising and manipulating software distribution channels in Southeast Asia. This group distinguishes itself through its highly selective victimology, specifically targeting digital certificates used by software developers in the region to facilitate supply chain attacks. The operation focuses on stealth and long-term infiltration rather than immediate disruption, and has evolved to incorporate Living off the Land techniques and target cloud services.