Ted Lee
4 articles
-
BlogPeckBirdy: Un Marco de Script Versátil para la Explotación de LOLBins Utilizado por Grupos de Amenaza Alineados con China
PeckBirdy es un sofisticado marco de C&C basado en JScript utilizado por grupos APT alineados con China para explotar LOLBins en múltiples entornos, entregando puertas traseras avanzadas para atacar a las industrias de juegos de azar y entidades gubernamentales asiáticas.
January 26th, 2026 12 minTed Lee, Joseph C Chen
Read article -
BlogGame of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations.
November 25th, 2024 17 minLeon M Chang, Theo Chen, Lenart Bermejo, Ted Lee
Read article -
BlogEarth Estries Targets Government, Tech for Cyberespionage
We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures (TTPs) employed, we observed overlaps with the advanced persistent threat (APT) group FamousSparrow as Earth Estries targets governments and organizations in the technology sector.
August 30th, 2023 12 minTed Lee, Lenart Bermejo, Hara Hiroaki, Leon M Chang…
Read article -
ResearchEarth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign
Our research provides a detailed analysis of the new tools and techniques used by Earth Baku in its cyberespionage campaign against organizations in the Indo-Pacific region.
August 24th, 2021 4 minHara Hiroaki, Ted Lee
Read article