Antlion
Description
(Symantec) Antlion is believed to have been involved in espionage activities since at least 2011, and this recent activity shows that it is still an actor to be aware of more than 10 years after it first appeared.
The length of time that Antlion was able to spend on victim networks is notable, with the group able to spend several months on victim networks, affording plenty of time to seek out and exfiltrate potentially sensitive information from infected organizations. The targeting of Taiwan is perhaps unsurprising given we know Chinese state-backed groups tend to be interested in organizations in that region.
Names
| Name | Name-Giver |
|---|---|
| Antlion | ? |
Country
Motivation
- Information theft and espionage
First Seen
2011
Observed Sectors
Observed Countries
Tools
Information
Other Information
Uuid
d3d31dfb-086b-437d-92f8-bb116d2177eb
Last Card Change
2022-02-04