🇨🇳

Earth Yako

APT Group Information theft and espionage ETDA ✓

Also Known As 2 names

Enelink Operation RestyLink

Target Countries 1

Countries highlighted in red

Japan

Sectors Targeted

No targeted sector recorded

Details

Origin 🇨🇳 CN

Last Updated 10 Feb 2024

MITRE ATT&CK 3

T1059 T1071.001 T1566.001

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 3 entries

Operation RestyLink NTT

Operation Enelink ?

Earth Yako Trend Micro

Observed Target Countries 1

Based on ETDA data — countries highlighted in red

Japan

Description

(NTT) Our SOC observed APT campaign targeting Japanese companies starting from mid of April 2022. We think that this campaign had already started in March 2022 and related attack might have performed around October 2021. It implies that this campaign is not temporary nor intensive, and it could continue from here forward.

Reports & References 1

https://insight-jp.nttsecurity.com/post/102hojk/operation-restylink-apt-campaign-targeting-japanese-companies

ETDA Profile

Operation RestyLink

Origin

[Unknown]

First Seen 2021

Motivation

Information theft and espionage

View on ETDA APT Groups ↗