ProofpointPublished
TA4922: The Suspected Chinese Crime Group is Going Global
Excerpt
TA4922 is a highly sophisticated threat actor demonstrating a rapid operational tempo and continually evolving malware arsenal.
The group has been observed using multiple malware families including Atlas
RAT, RomulusLoader, SilentRunLoader, and ValleyRAT (Winos4.0), among others.
TA4922 relies on localized lures often themed around HR, payroll, tax, and invoicing to convince targets across multiple regions. In recent months, the actor’s activity has spread to more countries globally, including in Europe and Africa.
The actor combines malicious activity with legitimate tools, tru…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Proofpoint on proofpoint.com.
Mentioned in the excerpt
More from Proofpoint7
- Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy CirclesProofpoint · Published 30 Sep
- Carry-On Compromise: TA4922 Packs PackClientProofpoint · Published 25 Aug
- Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click ExploitProofpoint · Published 28 Jul
- ta458 roundpress exploitsProofpoint · Published 15 Jul
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
