Ted Lee
4 articles
-
Blog汎用性の高いLOLBin悪用フレームワーク「PeckBirdy」：中国系の攻撃グループが利用
PeckBirdyは、中国系APTグループが用いるJScript型のLOLBin悪用フレームワークです。多くの環境に適応できることから、ギャンブル組織や行政機関に対するバックドア攻撃に利用されています。
January 26th, 2026 12 minTed Lee, Joseph C Chen
Read article -
BlogGame of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations.
November 25th, 2024 17 minLeon M Chang, Theo Chen, Lenart Bermejo, Ted Lee
Read article -
BlogEarth Estries Targets Government, Tech for Cyberespionage
We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures (TTPs) employed, we observed overlaps with the advanced persistent threat (APT) group FamousSparrow as Earth Estries targets governments and organizations in the technology sector.
August 30th, 2023 12 minTed Lee, Lenart Bermejo, Hara Hiroaki, Leon M Chang…
Read article -
ResearchEarth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign
Our research provides a detailed analysis of the new tools and techniques used by Earth Baku in its cyberespionage campaign against organizations in the Indo-Pacific region.
August 24th, 2021 4 minHara Hiroaki, Ted Lee
Read article