CHINA'S cybercrime group TA4922 is expanding its global operations, previously focused on Japan, now targeting countries like Taiwan, South Korea, and several in Europe. This group uses diverse tactics including phishing and various malware delivery methods, adapting to local environments with culturally relevant bait. Their operations feature a mix of socially engineered emails impersonating finance-related entities, often directing victims to less monitored communication platforms.
The group has shown significant operational escalation with a broad range of attack techniques, demonstrating a flexible approach that confounds traditional detection efforts.