EudorIACyber Intelligence
Monitoraggio operativo Newsletter IT EN
← Torna all'intelligence
Avviso tecnico

Scraper: Rising Tide: Chasing the Currents of Espionage in the South China Sea

Fonte aperta verificata
Intelligence con provenienza tracciabile. EudorIA conserva gli indicatori tecnici acquisiti dai feed supportati, con fonte, data e contesto. Gli IOC condivisibili sono disponibili nei feed STIX; le azioni di rilevamento e blocco richiedono la valutazione di validita, confidenza e applicabilita al perimetro del cliente. Consulta i feed STIX
Sintesi operativa EudorIA

Cosa significa

Priorità 55/100

MISP EudorIA ha pubblicato l'advisory "Scraper: Rising Tide: Chasing the Currents of Espionage in the South China Sea". Occorre verificarne l'applicabilita rispetto a prodotti e servizi in uso.

Perché conta

Un advisory attendibile puo richiedere verifiche, aggiornamenti o mitigazioni, ma l'applicabilita va confermata sul perimetro reale.

DestinatariITSOCCISO

Testo acquisito dalla fonte

Evento MISP pubblicato con TLP:CLEAR: Scraper: Rising Tide: Chasing the Currents of Espionage in the South China Sea. Report from - [URL rimossa] (1663734637) html Skip to main content BlogThreat Insight Rising Tide: Chasing the Currents of Espionage in the South China Sea # Rising Tide: Chasing the Currents of Espionage in the South China Sea Share with your network! August 30, 2022 Michael Raggi and Sveva Scenarelli at PwC Proofpoint’s Threat Research Team details a recent cyber espionage campaign targeting entities globally and conducted by a threat actor publicly which was attributed in 2021 by multiple governments and was the focus of a 2021 indictment by the US Department of Justice. The targets of this recent campaign spanned Australia, Malaysia, and Europe, as well as entities that operate in the South China Sea. Proofpoint’s research has been assisted by the PwC Threat Intelligence team to provide the information security community with a comprehensive view of the threat activity described. ### Introduction Proofpoint and PwC Threat Intelligence have jointly identified a cyber espionage campaign, active since April 2022 through June, delivering the ScanBox exploitation framework to targets who visit a malicious domain posing as an Australian news website. The joint efforts of Proofpoint and PwC researchers provide a moderate confidence assessment that recent campaigns targeting the federal government, energy, and manufacturing sectors globally may represent recent efforts by TA423 / R

Fonte
MISP EudorIA
Entità pubblicatrice
MISP EudorIA
Tipo entità
Comunità di intelligence
Area
Global
Lingua originale
it · traduzione non necessaria
Pubblicazione
30/07/2026 02:47
Condivisione
TLP:CLEAR
Indicatori dichiarati dalla fonte
81
IOC indicizzati per la ricerca
0 valori nel periodo di conservazione
IOC disponibili nel feed STIX
43Ultima verifica di condivisione: 2026-09-26T12:01:50.637833+00:00
Evento MISP
7f79ab3b-6744-4857-85a0-ec2803a67372
MITRE ATT&CK
Template Injection - T1221
Classificazione
Media
Apri la fonte originale