BlackTech — APT Profile
BlackTech is a suspected Chinese cyber espionage group that has primarily targeted organizations in East Asia--particularly Taiwan, Japan, and Hong Kong--and the US since at least 2013. BlackTech has used a combination of custom malware, dual-use tools, and living off the land tactics to compromise media, construction, engineering, electronics, and financial company networks.Also tracked as
Palmerworm
Tools & malware
- Flagpro Backdoor
- Kivars Backdoor
- PLEAD Backdoor
- PsExec Remote Execution
- TSCookie Backdoor
- Waterbear Backdoor