In a sophisticated display of persistent cyber-espionage, researchers have identified a renewed campaign by the China-based threat actor group known as TA423—also identified as Red Ladon—targeting domestic Australian organizations and international energy firms operating within the contested waters of the South China Sea. The campaign, which utilized “watering hole” tactics to deploy the ScanBox JavaScript-based […]
Shadow Reconnaissance: APT TA423 Deploys ScanBox in Strategic Watering Hole Campaign
In an era of escalating geopolitical friction, the digital landscape has become the primary theater for clandestine intelligence gathering. Recent findings from the threat intelligence units at Proofpoint and PwC have shed light on a sophisticated, ongoing cyber-espionage campaign orchestrated by the China-based Advanced Persistent Threat (APT) group known as TA423—also identified in security circles […]
Stealth and Surveillance: The Resurgence of the ScanBox Framework in South China Sea Espionage
In a chilling reminder that digital espionage is rarely deterred by legal indictments, a sophisticated threat actor linked to the Chinese government has launched a fresh campaign of cyber-surveillance. Researchers from Proofpoint and PwC have uncovered a coordinated "watering hole" attack utilizing the infamous ScanBox JavaScript-based reconnaissance framework. This campaign, which targeted Australian organizations and […]
Stealth and Surveillance: The Resurgence of the ScanBox Framework in Chinese Cyber-Espionage
In a sophisticated display of geopolitical intelligence gathering, the China-based threat actor known as TA423—alternatively referred to by the cybersecurity community as Red Ladon—has been caught deploying the legacy ScanBox reconnaissance framework in a series of targeted watering hole attacks. Recent findings from the threat intelligence teams at Proofpoint and PwC have shed light on […]