Since June 2024, the China-affiliated threat actor known as MirrorFace has been linked to a fresh spear-phishing attempt that mainly targets Japanese individuals and businesses.
Trend Micro’s technical study indicates that the effort aims to disseminate backdoors known as ANEL (also called UPPERCUT) and NOOPDOOR (also called HiddenFace).
One interesting aspect of this operation, according to security expert Hara Hiroaki, is the resurgence of a backdoor called ANEL, which APT10 used in assaults against Japan until around 2018 and has not been observed since read more about ANEL and NOOPDOOR Backdoors Weaponized in New MirrorFace Campaign Against Japan.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.