A previously undetected cyberespionage group spied against Taiwanese government agencies and the island-country’s manufacturing sector, say cybersecurity researchers. The Symantec Threat Hunter Team doesn’t attribute the threat group to any particular country, other than noting it likely operates “from a region with a strategic interest in Taiwan.”
The threat group, dubbed “Grayling” by Symantec, additionally targeted IT and biomedical companies between February and May. The same threat actor also hacked organizations in the Vietnam, the United States the government of a Pacific nation. Grayling’s targets as well as its post-exploitation behaviors suggest intelligence gathering rather than financially-motivated hacking, the researchers say in a Tuesday blog post.
