Catching the Big Phish: Earth Preta Targets Government, Educational, and Research Institutes Around the World

Botconf 2023
Thursday
2023-04-22 | 14:50 – 15:20

Nick Dai 🗣 | Vickie Su | Sunny W Lu

We have been monitoring a wave of spear-phishing attacks targeting the government, academic, foundations, and research sectors around the world. Based on the lure documents we observed in the wild, this is a large-scale cyberespionage campaign that began around March. After months of tracking, the seemingly wide outbreak of targeted attacks includes but not limited to Myanmar, Australia, the Philippines, Japan and Taiwan. We analyzed the malware families used in this campaign and attributed the incidents to a notorious advanced persistent threat (APT) group called Earth Preta (also known as Mustang Panda and Bronze President).

External link: Blog post


Slides Icon

PDF
Scroll to Top