APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains
As part of a nearly three-year campaign, a China-nexus threat actor identified as APT24 has been spotted establishing persistent remote access to infected networks utilizing a malware known as BADAUDIO that was previously undocumented.
According to Google Threat Intelligence Group (GTIG) researchers Harsh Parashar, Tierra Duncan, and Dan Perez, APT24 has recently shifted to using more sophisticated vectors targeting organizations in Taiwan, whereas earlier operations relied on broad strategic web compromises to compromise legitimate websites.
This involves the deployment of targeted phishing efforts and the frequent penetration of a local digital marketing company to carry out supply chain attacks.
APT24, also known as Pitty Tiger, is the name given to a suspected Chinese hacking...