Cyber threats / Threat actors

Earth Wendigo

CN Suspected sponsor: China
2
APAC targets
0
Techniques
0
Incidents
0
News · 30d
Profile

Earth Wendigo is a threat actor from China that has been targeting several organizations — including government organizations, research institutions, and universities in Taiwan — since May 2019, aiming to exfiltrate emails from targeted organizations via the injection of JavaScript backdoors to a webmail system that is widely used in Taiwan. The threat actor also sent spear-phishing emails embedded with malicious links to multiple individuals, including politicians and activists, who support movements in Tibet, the Uyghur region, or Hong Kong.

ATT&CK techniques
MITRE ATT&CK has no technique mapping for this actor.
Incidents attributed
  • No incident in the register is attributed to this actor.
In the news
  • No Asia-Pacific article names this actor yet.
Targets
Sectors: Education, Government
Relevance to the EU
EU relevance: Medium
Targets education in Hong Kong, where the EU has Education & Skills projects; 1 more such overlap
6 EU cooperation projects in the Asia-Pacific countries this actor targets:
Trade & Investment
2
Energy & Green Transition
1
Education & Skills
1
Digital & ICT
1
Development Cooperation
1
Threats to the EU →
References
Sources: MISP