Tracking the Progression of Earth Hundun’s Cyberespionage Campaign in 2024

In their previous report, Trend Micro researchers introduced the sophisticated cyberespionage campaign orchestrated by Earth Hundun, a threat actor known for targeting the Asia-Pacific region using the Waterbear malware and its latest iteration, Deuterbear. We first observed Deuterbear being used Read More …

BendyBear: Novel Chinese Shellcode Linked With Cyber Espionage Group BlackTech

Highly malleable, highly sophisticated and over 10,000 bytes of machine code. This is what Unit 42 researchers were met with during code analysis of this “bear” of a file. The code behavior and features strongly correlate with that of the Read More …

Waterbear is Back, Uses API Hooking to Evade Security Product Detection

Waterbear, which has been around for several years, is a campaign that uses modular malware capable of including additional functions remotely. It is associated with the cyberespionage group BlackTech, which mainly targets technology companies and government agencies in East Asia (specifically Read More …