TIDRONE Targets Military and Satellite Industries in Taiwan
A threat cluster we named TIDRONE, possibly linked to Chinese-speaking groups, has been actively targeting Taiwan's military-related industries, particularly drone manufacturers.
Espionage
Predator Spyware Infrastructure Resurfaces After US Sanctions
Insikt Group released a report revealing the return of Intellexa's Predator spyware infrastructure. Despite US government sanctions and a significant decline in activity following public exposure in 2023, Predator has resurfaced with modifications aimed at evading detection.
Suspected Espionage Campaign Delivers "Voldemort" Malware Impersonating Tax Authorities
Proofpoint released a threat insight report detailing an unusual campaign delivering custom malware named "Voldemort". Researchers assess with moderate confidence that the goal of this activity is espionage.