Click here to download all references as Bib-File.

Enter keywords to filter the library entries below or Propose new Entry
2023-05-02 ⋅ Trend Micro ⋅ Ted Lee, Hara Hiroaki
@online{lee:20230502:attack:c33db79, author = {Ted Lee and Hara Hiroaki}, title = {{Attack on Security Titans: Earth Longzhi Returns With New Tricks}}, date = {2023-05-02}, organization = {Trend Micro}, url = {https://www.trendmicro.com/en_us/research/23/e/attack-on-security-titans-earth-longzhi-returns-with-new-tricks.html}, language = {English}, urldate = {2023-05-04} } Attack on Security Titans: Earth Longzhi Returns With New Tricks
Croxloader SPHijacker
2023-02-16 ⋅ Trend Micro ⋅ Hara Hiroaki, Yuka Higashi, Masaoki Shoji
@online{hiroaki:20230216:invitation:19ecea0, author = {Hara Hiroaki and Yuka Higashi and Masaoki Shoji}, title = {{Invitation to a Secret Event: Uncovering Earth Yako’s Campaigns}}, date = {2023-02-16}, organization = {Trend Micro}, url = {https://www.trendmicro.com/en_us/research/23/b/invitation-to-secret-event-uncovering-earth-yako-campaigns.html}, language = {English}, urldate = {2023-02-17} } Invitation to a Secret Event: Uncovering Earth Yako’s Campaigns
MirrorKey TransBox
2022-01-25 ⋅ Trend Micro ⋅ Hara Hiroaki
@techreport{hiroaki:20220125:ambiguously:a846748, author = {Hara Hiroaki}, title = {{Ambiguously Black: The Current State of Earth Hundun's Arsenal}}, date = {2022-01-25}, institution = {Trend Micro}, url = {https://jsac.jpcert.or.jp/archive/2022/pdf/JSAC2022_8_hara_en.pdf}, language = {English}, urldate = {2022-04-04} } Ambiguously Black: The Current State of Earth Hundun's Arsenal
Flagpro SPIDERPIG RAT
2021-08-25 ⋅ Trend Micro ⋅ Hara Hiroaki, Ted Lee
@techreport{hiroaki:20210825:earth:776384f, author = {Hara Hiroaki and Ted Lee}, title = {{Earth Baku An APT Group Targeting Indo-Pacific Countries With New Stealth Loaders and Backdoor}}, date = {2021-08-25}, institution = {Trend Micro}, url = {https://documents.trendmicro.com/assets/white_papers/wp-earth-baku-an-apt-group-targeting-indo-pacific-countries.pdf}, language = {English}, urldate = {2021-08-31} } Earth Baku An APT Group Targeting Indo-Pacific Countries With New Stealth Loaders and Backdoor
Cobalt Strike SideWalk
2021-02-24 ⋅ Allsafe ⋅ Shota Nakajima, Hara Hiroaki
@techreport{nakajima:20210224:malware:0f5ff88, author = {Shota Nakajima and Hara Hiroaki}, title = {{Malware Analysis at Scale - Defeating Emotet by Ghidra}}, date = {2021-02-24}, institution = {Allsafe}, url = {https://jsac.jpcert.or.jp/archive/2021/pdf/JSAC2021_workshop_malware-analysis_jp.pdf}, language = {English}, urldate = {2021-02-26} } Malware Analysis at Scale - Defeating Emotet by Ghidra
Emotet
2019-08-27 ⋅ Trend Micro ⋅ Hara Hiroaki, Jaromír Hořejší, Loseway Lu
@online{hiroaki:20190827:ta505:9bcbff1, author = {Hara Hiroaki and Jaromír Hořejší and Loseway Lu}, title = {{TA505 At It Again: Variety is the Spice of ServHelper and FlawedAmmyy}}, date = {2019-08-27}, organization = {Trend Micro}, url = {https://blog.trendmicro.com/trendlabs-security-intelligence/ta505-at-it-again-variety-is-the-spice-of-servhelper-and-flawedammyy/}, language = {English}, urldate = {2019-11-27} } TA505 At It Again: Variety is the Spice of ServHelper and FlawedAmmyy
FlawedAmmyy ServHelper