Resources & Insights

3 articles

• 
  Blog

  Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions

  Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations.

  November 25th, 2024 17 min

  Leon M Chang, Theo Chen, Lenart Bermejo, Ted Lee

  Read article →
• 
  Research

  Using MITRE ATT&CK to Identify an APT Attack

  We analyzed the tools, relationships, and behaviors used in a long-standing intrusion of a company after its security team observed malicious C&C traffic.

  December 15th, 2020 4 min

  Lenart Bermejo, Gilbert Sison, Buddy Tancio

  Read article →
• 
  Blog

  Digmine Miner Spreading via Facebook Messenger

  A new cryptocurrency-mining bot is spreading through Facebook Messenger. We named this Digmine based on the moniker (비트코인 채굴기 bot) it was referred to in a report of recent related incidents in South Korea.

  December 21st, 2017 5 min

  Lenart Bermejo, Hsiao-Yu Shih

  Read article →