Operation RestyLink

Description

(NTT) Our SOC observed APT campaign targeting Japanese companies starting from mid of April 2022. We think that this campaign had already started in March 2022 and related attack might have performed around October 2021. It implies that this campaign is not temporary nor intensive, and it could continue from here forward.

Names

NameName-Giver
Operation RestyLinkNTT
Operation Enelink?
Earth YakoTrend Micro

Country

Motivation

  • Information theft and espionage

First Seen

2021

Observed Countries

Information

Other Information

Uuid

77129bef-3a35-4ebb-a51e-fb04b22fcb25

Last Card Change

2023-02-17