Trusted Design

APT on Taiwan - insight into advances of adversary TTPs

概要

The summer months dawn on us and the financial year comes to a close. It is in the run up to this time that most organisations see an increase in targeted attack activity. We begin by reading news of an attack against the Taiwanese Government. Whilst we would prefer to disassociate ourselves with APT attacks against Governments our interest was piqued by a particular blog written by our friends over at TrendMicro[1]. There were several things that struck us as both interesting and concerning about the details; a threat actor known to operate in South East Asia is now using secure sockets layer (“SSL”) encryption in their malware. SSL is typically used to encrypt data between the client and the server, thus making the content unreadable by any systems sitting between the two end points, and significantly raising the cost of defence. Without the use of SSL interception traditional IDS/IPS systems could cease to detect compromised systems.

Created: 2026-02-23

Indicators

• FileHash-MD5 - cdf0e90b0a859ef94be367fdd1dd98c6 -
• FileHash-MD5 - 27f5b6e326e512a7b47e1cd41493ee55 -
• FileHash-MD5 - 6e4e030fbd2ee786e1b6b758d5897316 -
• FileHash-MD5 - 548884eabebef0081dd3af9f81159754 -
• FileHash-MD5 - 05bc4a9b603c1aa319d799c8fba7a42a -

類似Pulses

• Taiwan targeted with new cyberespionage backdoor Trojan (score: 0.60)
• Attack Gains Foothold Against East Asian Government (score: 0.60)
• Defending the White Elephant (score: 0.58)
• Targeted Attack Distributes PlugX in Russia (score: 0.57)
• Multiple Chinese APT Groups Quickly Use Flash Zero-Day (score: 0.56)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る