[1/5] APT group #EarthAughisky (aka Taidoor) has been consistently involved in #cyberespionage activities that target organizations in Taiwan for over 10 years. Follow this thread for more. 
[2/5] Earth Aughisky’s arsenal and deployments vary according to the sensitivities and perceived values of its targets. The higher the value of the personalities, organizations, and/or systems, the more customizations the malware has and the less deployment sightings.
[3/5] Our tracking of Earth Aughisky in over 10 years has allowed us to track observations and consistencies. However, the group’s level of activity dropped beginning in 2017, coinciding with its expansion of targets in the region:
[4/5] Moreover, reports of Earth Aughisky’s recent activities in Japan and Southeast Asia have allowed us to see activity and malware routine overlaps with other cyberespionage groups such as DragonOK and BlackTech, among other malware and APT groups.
[5/5] Given the group’s available resources, we call on organizations and security researchers to continue being vigilant in reinforcing their defenses against Earth Aughisky. To find the full details and insights of our research, read our paper here: research.trendmicro.com/3EgHWN4
• • •
Missing some Tweet in this thread? You can try to
force a refresh
