Nick Dai
5 articles
-
BlogEarth Kurma APT Campaign Targets Southeast Asian Government, Telecom Sectors
An APT group dubbed Earth Kurma is actively targeting government and telecommunications organizations in Southeast Asia using advanced malware, rootkits, and trusted cloud services to conduct cyberespionage.
April 25th, 2025 13 minNick Dai, Sunny Lu
Read article -
BlogEarth Preta Mixes Legitimate and Malicious Components to Sidestep Detection
Our Threat Hunting team discusses Earth Preta’s latest technique, in which the APT group leverages MAVInject and Setup Factory to deploy payloads, and maintain control over compromised systems.
February 18th, 2025 6 minNathaniel Morales, Nick Dai
Read article -
BlogEarth Simnavaz (aka APT34) Levies Advanced Cyberattacks Against Middle East
Trend Micro's investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to sectors in the Middle East.
October 11th, 2024 11 minMohamed Fahmy, Bahaa Yamany, Ahmed Kamal, Nick Dai
Read article -
BlogNew Mimic Ransomware Abuses Everything APIs for its Encryption Process
Trend Micro researchers discovered a new ransomware that abuses the APIs of a legitimate tool called Everything, a Windows filename search engine developed by Voidtools that offers quick searching and real-time updates for minimal resource usage.
January 26th, 2023 5 minNathaniel Morales, Earle Maui Earnshaw, Don Ovid Ladores, Nick Dai…
Read article -
BlogEarth Preta Spear-Phishing Governments Worldwide
We break down the cyberespionage activities of advanced persistent threat (APT) group Earth Preta, observed in large-scale attack deployments that began in March. We also show the infection routines of the malware families they use to infect multiple sectors worldwide: TONEINS, TONESHELL, and PUBLOAD.
November 18th, 2022 17 minNick Dai, Vickie Su, Sunny Lu
Read article