Blue Termite, also identified by the alias Cloudy Omega, is a cyber-espionage Advanced Persistent Threat (APT) group that first emerged in November 2013. The group's origin is assessed with moderate confidence to be China, and its primary motivation is the theft of sensitive information. Blue Termite almost exclusively targets Japanese organizations. The group is notable for its highly customized malware, particularly variants from the Emdivi family, which are specifically tailored to individual victim machines to complicate analysis and detection. This tailored approach, along with their consistent focus on Japanese entities, sets them apart. It is important to distinguish Blue Termite from the unrelated 'Termite' ransomware group, which began operations in late 2024.

Aliases del actor

Cloudy OmegaEmdiviCloudy Omega indica una estrategia de desinformaciónlo que puede dificultar la detecciónel rastreo

Actores similares

blue-termiteactor · 1Blue Tsunamiapt · 0termiteransomware · 18blueskyransomware · 3blueboxransomware · 2bluelockerransomware · 2lunalockransomware · 2apt-blueprintactor · 1bluebravoactor · 1bluewindgroupactor · 1