Resources & Insights

3 articles

• 
  Blog

  PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups

  PeckBirdy is a sophisticated JScript-based C&C framework used by China-aligned APT groups to exploit LOLBins across multiple environments, delivering advanced backdoors to target gambling industries and Asian government entities.

  January 26th, 2026 12 min

  Ted Lee, Joseph C Chen

  Read article →
• 
  Blog

  Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions

  Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations.

  November 25th, 2024 17 min

  Leon M Chang, Theo Chen, Lenart Bermejo, Ted Lee

  Read article →
• 
  Research

  Earth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign

  Our research provides a detailed analysis of the new tools and techniques used by Earth Baku in its cyberespionage campaign against organizations in the Indo-Pacific region.

  August 24th, 2021 4 min

  Hara Hiroaki, Ted Lee

  Read article →