MirrorFace updates toolset, expands reach to Europe

Did you hear about the latest cyber attack? The China-aligned MirrorFace APT group has set its sights on a Central European diplomatic institute, using Operation AkaiRyū as their weapon of choice. This marks the first time this group has targeted an entity in Europe, according to research by ESET.

Operation AkaiRyū, which translates to RedDragon in Japanese, kicks off with targeted spearphishing emails that capitalize on the upcoming World Expo 2025 in Osaka, Japan, as a lure. The group’s modus operandi involves using sophisticated tactics to infiltrate systems and install malware through legitimate applications and tools.

Want to dive deeper into the tactics, techniques, and procedures of this campaign? Watch ESET Chief Security Evangelist Tony Anscombe break it down in the video below and be sure to check out the full blogpost for more insights.

Stay connected with us on Facebook, X, LinkedIn, and Instagram.

Leave a Reply

Your email address will not be published. Required fields are marked *