Trusted Design

Poison Ivy Activity Targeting Myanmar, Asian Countries

概要

The infamous Remote Access Trojan (RAT) Poison Ivy (hereafter referred to as PIVY) has resurfaced recently, and exhibits some new behaviors. PIVY has been observed targeting a number of Asian countries for various purposes over the past year. Palo Alto Networks’ Unit 42 recently blogged about a new Poison Ivy variant targeting Hong Kong activists dubbed SPIVY that uses DLL sideloading and operates quite differently from a variant recently observed by ASERT that has been active for at least the past 12 months.

Created: 2026-02-23

Indicators

• FileHash-SHA1 - 675a3247f4c0e1105a41c685f4c2fb606e5b1eac -
• hostname - news.tibetgroupworks.com -
• FileHash-SHA1 - ec646c57f9ac5e56230a17aeca6523a4532ff472 -
• hostname - webserver.servehttp.com -
• FileHash-SHA1 - 63e00dbf45961ad11bd1eb55dff9c2771c2916a6 -
• hostname - web.microsoftdefence.com -
• hostname - admin.nslookupdns.com -
• FileHash-SHA1 - 49e36de6d757ca44c43d5670d497bd8738c1d2a4 -
• FileHash-SHA1 - f389e1c970b2ca28112a30a8cfef1f3973fa82ea -
• FileHash-SHA1 - a7d206791b1cdec616e9b18ae6fa1548ca96a321 -
• FileHash-SHA1 - ef2618d58bd50fa232a19f9bcf3983d1e2dff266 -
• FileHash-SHA1 - cbbfc3b5ff08de14fdb2316f3b14886dfe5504ef -
• hostname - jackhex.md5c.net -

類似Pulses

• Poison Ivy RAT Variant Targets Hong Kong Pro-Democracy Activists (score: 0.75)
• 9002 Trojan via Google Drive Tiny URL (score: 0.56)
• Unusual Exploit Kit Targets Chinese Users,2 (score: 0.56)
• Defending the White Elephant (score: 0.55)
• Unusual Exploit Kit Targets Chinese Users (score: 0.55)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る