China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait
MirrorFace, a threat actor with ties to China, was seen attacking a diplomatic institution in the European Union, the first time the hacking team has targeted a regional body.
According to ESET's APT Activity Report for the April–September 2024 period, the threat actor used the impending World Expo, which will take place in Osaka, Japan in 2025, as a lure during this attack.
This demonstrates that MirrorFace is still focused on Japan and events associated with it despite this expanded geographic targeting.
APT10, an umbrella organization that includes clusters tracked as Earth Tengshe and Bronze Starlight, is thought to include MirrorFace, also known as Earth Kasha read more about China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait.
Get up to date on...