Do Son JPCERT/CC details new APT-C-60 attacks on Japan. The group abuses Proton Drive, LNK files, and GitHub to deploy SpyGlace malware.
APT-C-60
JPCERT exposed APT-C-60 targeting Japan via VHDX LNK files in phishing emails. The SpyGlace malware uses GitHub to fetch encrypted commands and statcounter for victim telemetry.
Learn about the targeted attack by APT-C-60 on a Japanese organization in 2024, using legitimate services and evasive tactics.
Find out how the APT-C-60 cyberespionage group exploits vulnerabilities in WPS Office for Windows to compromise millions of users.