Ted Lee
4 articles
-
BlogPeckBirdy: Um Framework de Script Versátil para Exploração de LOLBins Usado por Grupos de Ameaça Alinhados à China
PeckBirdy é um sofisticado framework de C&C baseado em JScript usado por grupos APT alinhados à China para explorar LOLBins em vários ambientes, entregando backdoors avançados para atingir indústrias de jogos de apostas e entidades governamentais asiáticas.
January 26th, 2026 12 minTed Lee, Joseph C Chen
Read article -
BlogGame of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations.
November 25th, 2024 17 minLeon M Chang, Theo Chen, Lenart Bermejo, Ted Lee
Read article -
BlogEarth Estries Targets Government, Tech for Cyberespionage
We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures (TTPs) employed, we observed overlaps with the advanced persistent threat (APT) group FamousSparrow as Earth Estries targets governments and organizations in the technology sector.
August 30th, 2023 12 minTed Lee, Lenart Bermejo, Hara Hiroaki, Leon M Chang…
Read article -
ResearchEarth Baku Returns: Uncovering the Upgraded Toolset Behind the APT Group’s New Cyberespionage Campaign
Our research provides a detailed analysis of the new tools and techniques used by Earth Baku in its cyberespionage campaign against organizations in the Indo-Pacific region.
August 24th, 2021 4 minHara Hiroaki, Ted Lee
Read article