X-Industry

Activity Summary - Week Ending 16 April 2021:

• Red Sky Alliance observed 58 new unique email accounts compromised with Keyloggers
• Analysts identified 30,373 connections from new unique IP addresses
• 3,512 new IP addresses participating in various Botnets were Observed
• Security Researcher under Attack
• CISA’s New Tool – Aviary
• FormBook Malware
• State Sponsored APT
• Lazarus and Vyvera
• TiT-for-TaT is Never Good
• Myanmar and Taiwan Protests

Link to full report: IR-21-106-001_weekly_106.pdf

Palmerworm, an advanced persistent threat (APT) group, has been active since 2013 and is engage in cyber espionage campaigns that target organizations in the US, East Asia, particularly Taiwan, and occasionally Japan and Hong Kong.  Palmerworm hackers are using new customized malware as well as ‘living off the land’ techniques manipulating tools and commands already built into an operating system for malicious purposes.

This APT group, also known as BlackTech, has conducted long-term espionage c