CyberSIXT Search
Research reports

hitcon.orgPDF

Pirates_of_The_Nang_Hai_Follow_the_Artifacts_of_Tropic_Trooper,_No_One_Knows.pdf

Excerpt

Follow the Artifacts No One Knows

ITOCHU Cyber & Intelligence inc.

Who are we?

Company: ITOCHU Cyber & Intelligence Inc.

Suguru

Ishimaru

Sr. Cybersecurity Researcher

HITCON 2021, 2019,

2017 and 2016

Yusuke

Niwa

Lead Cybersecurity Researcher

VB2023, Botconf, JSAC etc.

2

Motohiko Sato

X: @58_158_177_102

Shuhei Sasada

X: @sugimu_sec

Yasuhiro Takeda

X: @ytakeda_sec

Company: ITOCHU Cyber & Intelligence Inc.

Special Thanks to team members

3

Agenda

Motivation

Who is Tropic Trooper?

EntryShell

Xiangoop Loader

Disclosing Uncommon Attack Methods

VSCode As a RAT

EvilTwin Attack

Exploiting Domestic Electronic Seal System

Update process of a well-known app

Conclusions

NEW

NEW

4

Motivation

5

タイトルを入力Motivation

Reminiscent of a Spy…

The opening of the report, shown for reference. The full report, with its figures and indicators, is published by hitcon.org on hitcon.org.

Mentioned in the excerpt

More from hitcon.org1

On the same topics

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device