Suspected Cyber Espionage Campaign Targeting Global Organizations

Tags

External References

• https://www.recordedfuture.com/
• https://go.recordedfuture.com/
• https://otx.alienvault.com/

Description

An analysis identified a suspected cyber espionage campaign by TAG-100, a threat group exploiting internet-facing devices and utilizing open-source tools like the Go backdoor Pantegana. The campaign compromised two Asia-Pacific intergovernmental organizations and targeted multiple diplomatic, trade, and private sector entities globally across at least ten countries spanning Africa, Asia, North America, South America, and Oceania. The group employed open-source remote access capabilities and exploited various internet-facing products to gain initial access.

Date