Steven Adair (Volexity) gave this talk at the September 2019 Volexity Cyber Sessions.Learn how OceanLotus, one of the most advanced and pervasive threat groups that is active today, manages its tracking, exploitation, and command and control operations around the world. There is a good chance you have been tracked by OceanLotus without even knowing it. This talk shows how a digital surveillance campaign can turn into a cyberespionage operation.