Discover and read the best of Twitter Threads about #cyberespionage
Most recents (4)
[1/5] APT group #EarthAughisky (aka Taidoor) has been consistently involved in #cyberespionage activities that target organizations in Taiwan for over 10 years. Follow this thread for more. 
[2/5] Earth Aughisky’s arsenal and deployments vary according to the sensitivities and perceived values of its targets. The higher the value of the personalities, organizations, and/or systems, the more customizations the malware has and the less deployment sightings.
[3/5] Our tracking of Earth Aughisky in over 10 years has allowed us to track observations and consistencies. However, the group’s level of activity dropped beginning in 2017, coinciding with its expansion of targets in the region:
#ESETresearch investigated Donot Team’s (also known as APT-C-35 and SectorE02) #cyberespionage campaigns targeting military organizations, governments, Ministries of Foreign Affairs, and embassies of countries in South Asia. welivesecurity.com/2022/01/18/don… 1/5
A recent report by #Amnesty International links the group’s malware to an Indian cybersecurity company that be selling the spyware to entities in the region. 2/5
ESET’s investigation spans from September 2020 to October 2021 and details variants of the yty malware framework used to target entities in Bangladesh 🇧🇩, Sri-Lanka 🇱🇰, Pakistan 🇵🇰 and Nepal 🇳🇵. But also embassies in the Middle East, Europe, North and South America. 3/5
‘Tricks With a Notorious Russian Spy Group’
‘Security researchers have found links between the attackers and #Turla, a sophisticated team suspected of operating out of Moscow’s #FSB intelligence agency.’
#VenomousBear
#Snake
#malware
#UNC2452
#DarkHalo
wired.com/story/solarwin…
‘Security researchers have found links between the attackers and #Turla, a sophisticated team suspected of operating out of Moscow’s #FSB intelligence agency.’
#VenomousBear
#Snake
#malware
#UNC2452
#DarkHalo
wired.com/story/solarwin…
“…believe the SolarWinds #hackers and #Turla aren't one and the same. But … one #hacker group at the very least ‘inspired’ the other, and they may have common members between them or a shared #software developer building their #malware.”
wired.com/story/solarwin…
wired.com/story/solarwin…
“… That actually makes the connection more significant … ‘It’s more like handwriting. That handwriting or style propagates to different projects written by the same person.'"
#Turla
wired.com/story/solarwin…
#Turla
wired.com/story/solarwin…
