A Chinese language-speaking superior persistent menace (APT) actor has been noticed focusing on net infrastructure entities in Taiwan utilizing custom-made variations of open-sourced instruments with an intention to determine long-term entry inside high-value sufferer environments.
The exercise has been attributed by Cisco Talos to an exercise cluster it tracks as UAT-7237, which is believed to be energetic since at the least 2022.
Taiwan Internet Servers Breached by UAT-7237 Utilizing Personalized Open-Supply Hacking Instruments
